Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Velké využití RAM už po startu Windows 10

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Velké využití RAM už po startu Windows 10

#1 Příspěvek od VelkejPitomec »

Zdravím velké odporníky a odbornice,

Včera jsem narazil na zjištění, že po startu Windowsu se mi využívá 72% z celkové paměti RAM (16GB). Ale když se podívám do task managera, tak zde nemohu najít, který proces/program by si bral takové množství. Nevím jak tomu bylo dříve, všiml jsem si toho teprve včera.

Je možné, že jsem tak velký pitomec a napadl mě nějaký vir/malware nebo něco jiného ?

Screen z task managera:
http://leteckaposta.cz/229063736

Moc děkuju za pomoc

VP

---
Ještě přikládám logy z FRST
---
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-05.2019
Ran by User007 (administrator) on DESKTOP-4S44MO1 (MSI MS-7850) (04-05-2019 10:19:55)
Running from C:\Users\User007\Downloads
Loaded Profiles: User007 (Available Profiles: User007)
Platform: Windows 10 Home Version 1809 17763.437 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19041.481.0_x64__8wekyb3d8bbwe\YourPhone.exe
(ALCPU -> ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Blizzard App\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Blizzard App\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Blizzard App\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6685\Agent.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Electronic Arts, Inc. -> ) C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
(Electronic Arts, Inc. -> ) C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\User007\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Ubisoft Entertainment Sweden AB -> Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
(Ubisoft Entertainment Sweden AB -> Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\Steam.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18630280 2018-05-07] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26278576 2019-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1266872 2019-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Steam] => D:\Steam\steam.exe [3152160 2019-04-30] (Valve -> Valve Corporation)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Discord] => C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Ubisoft Game Launcher] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe [470872 2019-04-23] (Ubisoft Entertainment Sweden AB -> Ubisoft)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [EpicGamesLauncher] => "D:\Epic Games\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3114256 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Blizzard App\Battle.net.exe [1098728 2019-04-30] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\RunOnce: [Application Restart #3] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [807424 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-01] (Google LLC -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2019-04-23]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {034AB790-3CB2-4FA1-8477-2CEC79C7621A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {071EBA52-2C1E-4839-A254-1117E790F09A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [112672 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {09FFAE7F-F312-42A7-9FEE-C4FED790107B} - System32\Tasks\KiN SF => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {0AA57232-01B2-4FB6-BA63-F658CD4F7A69} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {0CF66747-7623-491B-A562-CE9E18FDBCDB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4382048 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {1738A680-D42C-4AE5-9093-2DD1765C324C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1439368 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B6C7F2F-D47B-4A4D-899E-2B9F6A557570} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [495136 2014-12-05] (LG Electronics Inc. -> LG Electronics Inc.)
Task: {27428F8D-F1A2-49D4-9E7E-B4ACC5528761} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [1328392 2015-11-20] (Intel(R) Software -> Intel Corporation)
Task: {2B55A48E-F885-4C93-B02E-04E9A2D13E08} - System32\Tasks\Core Temp Autostart User007 => C:\Program Files\Core Temp\Core Temp.exe [998488 2019-01-08] (ALCPU -> ALCPU)
Task: {2CFD6971-8C86-40CC-8C49-23456236B750} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [739624 2018-04-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {2F2D3D55-D18B-4A2A-862D-A68B35F769C5} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {33DB3DDC-9C90-4FD0-AF89-5B66DC12F467} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648048 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E7B47FE-6AEE-492F-869E-CA982BCF07EA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {441C93B0-C73F-4610-AAF6-9D00927C6DF1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [590704 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {670B2624-8B08-4614-89A7-E4C008E25816} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3728752 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68B34136-3C96-49B3-90FB-EC86819F56ED} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe
Task: {6F07C126-A9D8-4CB1-BE92-D93A5F303717} - System32\Tasks\MSILEDKeeper_Host => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe [851128 2018-08-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {80803625-3A6C-4998-A136-9FF2CBAFF44C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {8C6ABE5A-DE49-451E-BC22-FEDF5829C28A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-04-23] (Adobe Inc. -> Adobe)
Task: {A200FFDE-2065-4CCD-B330-8E576C09DE5E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4382048 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD60DACD-0C4A-4332-B523-2B1925587A4C} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF63F6EC-CF00-43AD-A5D1-A230DBCAE514} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2925960 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {BA5E82E0-21AD-43C7-97B9-037A6A28CE73} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {BAD55592-ABE5-490B-9AEA-4A85609E85AB} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BB4051F5-D82A-42C7-AEDC-3337AFC749F8} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C5522710-9919-48B4-B4B9-88AD0A0C2A0A} - System32\Tasks\MSISW_Host => C:\WINDOWS\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {CCB1CE4E-789B-4A76-90DC-B610E874F299} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CECF2105-B3D8-451F-8CAE-E1D26BC92ACC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [112672 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {D6F5A5AC-804B-4561-B26B-093C96B2E265} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D8463A80-49EC-4417-BAE1-1633C5351EB1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DB600790-BC3F-4267-B512-EE6B19D141E2} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DE819F9A-32DB-41E2-A751-3A849B5EE2B3} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2380088 2019-04-06] (AVAST Software s.r.o. -> AVAST Software)
Task: {E64AAC8D-7318-4CD4-9A7D-154E6062FF47} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {EB02E818-5536-4867-987B-18737FCD038C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_pepper.exe [1452600 2019-04-23] (Adobe Inc. -> Adobe)
Task: {F73FF976-53C9-49D4-9235-1948BF3B591B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1439368 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {F744CD91-8EB1-4C72-95F2-88F8AF027020} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FC815288-958D-4D00-8587-30D8B6386E8F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2a0de96e-6bd4-402c-a579-4c0b8f1d417d}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a216f975-0bd8-43ec-852e-b6e636b1585c}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2217625539-489516872-413406719-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR DefaultProfile: Default
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default [2019-05-04]
CHR Extension: (BetterTTV) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-12-06]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-20]
CHR Extension: (Tipli do prohlížeče) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbnfnbehhjknomdbfhcobpgpphnlnikp [2019-03-15]
CHR Extension: (AdBlock) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-04-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-24]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-27] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11146240 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-09] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-03-02] (FUTUREMARK INC -> Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [58792 2016-01-28] (Intel(R) SBA -> Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-05-07] (Logitech Inc -> Logitech Inc.)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [2020024 2019-01-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2323120 2019-04-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.)
R2 MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [31928 2018-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2303792 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3175216 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3476432 2015-10-12] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3830128 2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [110944 2018-09-15] (Microsoft Corporation -> Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18264 2017-02-23] (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation)
S3 DAUpdaterSvc; D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [X]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ALSysIO; C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys [46384 2019-04-24] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ATTENTION
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37104 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205400 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254128 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320624 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [57888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-07] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [257832 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [166848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88160 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1031000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476776 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220640 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [385848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-08-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-08-14] (Disc Soft Ltd -> Disc Soft Ltd)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation -> Intel Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-05-07] (Logitech Inc -> Logitech Inc.)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\MysticLight\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ed316ebc2bdc1c66\nvlddmkm.sys [21657024 2019-04-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-03-28] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [66792 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1122200 2018-08-30] (Realtek Semiconductor Corp. -> Realtek )
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2017-08-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46776 2018-12-21] (SteelSeries ApS -> )
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [48032 2018-12-21] (SteelSeries ApS -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 UcmCxUcsiNvppc; C:\WINDOWS\System32\drivers\UcmCxUcsiNvppc.sys [462000 2019-04-18] (NVIDIA Corporation -> NVIDIA Corporation)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [47616 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46584 2018-09-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [340008 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [61992 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54352 2016-08-18] (Intel Corporation -> Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-04 10:19 - 2019-05-04 10:20 - 000043263 _____ C:\Users\User007\Downloads\FRST.txt
2019-05-04 10:19 - 2019-05-04 10:19 - 000000000 ____D C:\FRST
2019-05-04 10:18 - 2019-05-04 10:18 - 002430464 _____ (Farbar) C:\Users\User007\Downloads\FRST64.exe
2019-05-04 09:24 - 2019-05-04 09:24 - 000000000 ___HD C:\OneDriveTemp
2019-04-29 18:57 - 2019-04-29 18:57 - 000004775 _____ C:\Users\User007\Downloads\Game-of-Thrones-S08E03(0000311708).zip
2019-04-26 20:28 - 2019-04-26 20:28 - 016624232 _____ (Moritz Bunkus) C:\Users\User007\Downloads\mkvtoolnix-64-bit-33.1.0-setup.exe
2019-04-26 20:25 - 2019-04-26 20:25 - 000034249 _____ C:\Users\User007\Downloads\Robin-Hood(0000308817).zip
2019-04-26 20:24 - 2019-04-26 20:24 - 000034248 _____ C:\Users\User007\Downloads\Robin-Hood(0000308658).zip
2019-04-24 16:30 - 2019-04-24 16:30 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 001006800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 001006800 _____ C:\WINDOWS\system32\vulkan-1.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000552328 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000456904 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2019-04-23 20:24 - 2019-04-18 19:03 - 011048896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-04-23 20:24 - 2019-04-18 19:03 - 009485192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 002039176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001722064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6443039.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001540032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001470208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001467648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6443039.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001162176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001134288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000911808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000821128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000808656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000675024 _____ C:\WINDOWS\system32\nvofapi64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000631040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000541904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000522120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 040412368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 035269568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 020187584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 017464712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 005421768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 004758736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2019-04-23 20:24 - 2019-04-18 01:25 - 001477008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvppcgenco64_1127831.dll
2019-04-23 20:24 - 2019-04-18 01:25 - 000462000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\UcmCxUcsiNvppc.sys
2019-04-23 20:24 - 2019-04-18 01:25 - 000046848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2019-04-23 18:33 - 2019-05-03 23:37 - 000003784 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-04-23 18:33 - 2019-05-03 23:37 - 000003488 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2019-04-23 18:32 - 2019-04-23 18:32 - 021104696 _____ (Adobe) C:\Users\User007\Downloads\install_flash_player_ppapi.exe
2019-04-22 13:33 - 2019-04-22 14:24 - 562514314 _____ C:\Users\User007\Downloads\Game.of.Thrones S08E02 720p.CZ Titulky.avi
2019-04-22 12:00 - 2019-04-22 13:29 - 978405444 _____ C:\Users\User007\Downloads\Game of Thrones-S08E02-1080i. CZ titulky v obraze.https___www.ulozto.cz__partner=1174444.avi
2019-04-19 20:40 - 2019-04-22 12:12 - 000000000 ____D C:\Users\User007\AppData\Local\STAR WARS Battlefront II
2019-04-15 20:03 - 2019-04-15 21:54 - 1219070960 _____ C:\Users\User007\Downloads\Hra o truny ( Game of Thrones ) S08E01 1080i.Orig.CZ Titulky HBO.ts
2019-04-14 14:49 - 2019-04-14 14:59 - 000000000 ____D C:\Users\User007\Desktop\How To Train Your Dragon The Hidden World (2019) [BluRay] [1080p] [YTS.AM]
2019-04-12 18:05 - 2019-04-24 16:30 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-11 19:12 - 2019-04-10 16:52 - 001734288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6442531.dll
2019-04-11 19:12 - 2019-04-10 16:52 - 001467864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6442531.dll
2019-04-11 19:06 - 2019-04-23 20:27 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-04-10 18:27 - 2019-04-10 18:27 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 012843520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 012139008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 007877120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 007645608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 006544824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 006071296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 005436904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 004660224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 004588536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 003657728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 003551112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002720256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002469376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002438368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001671352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001590064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001496576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001478968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001467344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001044280 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000865784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000793832 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000725928 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000653040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000474928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-04-10 18:27 - 2019-04-10 18:27 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000263600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-04-06 15:23 - 2019-04-26 20:25 - 000000000 ____D C:\Users\User007\Desktop\Robin Hood (2018) [WEBRip] [1080p] [YTS.AM]
2019-04-06 09:05 - 2019-04-06 09:05 - 017513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 015223296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 008898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007919104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 005765120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 005205448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004991112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004704272 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004527624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004304896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003690496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003496448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003421696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 003377976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 002842624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002701304 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002627384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 002592816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002275896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002017792 _____ C:\WINDOWS\system32\rdpnano.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001994768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001856000 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001697752 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001647632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001615872 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001567232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001468952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001459080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001458056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001370624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001360184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001311232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001297120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001294520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001191728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001179680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001155072 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001133568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001072424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-04-06 09:05 - 2019-04-06 09:05 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001053192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000998712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000984888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000982880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000974352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000909840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-04-06 09:05 - 2019-04-06 09:05 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000821048 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000809784 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000675096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000620560 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000598544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-04-06 09:05 - 2019-04-06 09:05 - 000540448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000508208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000506168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000485192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-04-06 09:05 - 2019-04-06 09:05 - 000408528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000386360 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000384312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000343984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000312632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000306488 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000283032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000257696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000255128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000234808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000159272 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000147496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000143880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000134456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000131384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000115360 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000097808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-04 10:14 - 2017-04-07 18:54 - 000000000 ____D C:\Users\User007\AppData\Local\Battle.net
2019-05-04 10:09 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-04 09:29 - 2019-02-16 19:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-05-04 09:24 - 2017-11-20 19:36 - 000000000 ____D C:\Users\User007\AppData\Roaming\Origin
2019-05-04 09:24 - 2017-11-20 19:34 - 000000000 ____D C:\ProgramData\Origin
2019-05-04 09:24 - 2016-07-10 18:46 - 000000000 ____D C:\Users\User007\AppData\Roaming\discord
2019-05-04 09:24 - 2016-04-01 20:23 - 000000000 ____D C:\Users\User007\AppData\Local\Ubisoft Game Launcher
2019-05-04 09:24 - 2016-03-29 18:57 - 000000000 ___RD C:\Users\User007\OneDrive
2019-05-04 09:23 - 2018-11-28 21:25 - 000000000 ____D C:\ProgramData\NVIDIA
2019-05-04 09:23 - 2016-03-29 19:05 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2019-05-03 23:51 - 2018-10-06 09:24 - 000003146 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2019-05-03 23:38 - 2016-10-23 14:00 - 000000000 ____D C:\Users\User007\AppData\Roaming\TS3Client
2019-05-03 23:37 - 2018-11-28 19:53 - 000002148 _____ C:\WINDOWS\System32\Tasks\MSISW_Host
2019-05-03 23:37 - 2018-11-28 19:48 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000003196 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000003152 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-11-28 19:48 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-03 23:37 - 2018-10-06 09:24 - 000003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-05-03 23:37 - 2018-10-06 09:24 - 000003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-05-03 23:37 - 2018-10-06 09:24 - 000002948 _____ C:\WINDOWS\System32\Tasks\KiN SF
2019-05-03 23:37 - 2018-10-06 09:24 - 000002854 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2217625539-489516872-413406719-1001
2019-05-03 23:37 - 2018-10-06 09:24 - 000002562 _____ C:\WINDOWS\System32\Tasks\SmartShare
2019-05-03 23:37 - 2018-10-06 09:24 - 000002440 _____ C:\WINDOWS\System32\Tasks\Core Temp Autostart User007
2019-05-03 23:34 - 2018-11-28 19:53 - 000002206 _____ C:\WINDOWS\System32\Tasks\MSILEDKeeper_Host
2019-05-03 23:34 - 2018-10-06 09:24 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-05-03 22:50 - 2016-03-29 19:06 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2019-05-03 22:50 - 2016-03-29 19:06 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2019-05-03 18:12 - 2018-11-28 19:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2019-05-03 18:12 - 2018-11-28 19:53 - 000000000 ____D C:\MSI
2019-05-03 18:12 - 2016-03-31 20:00 - 000000000 ____D C:\Program Files (x86)\MSI
2019-05-03 17:57 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF
2019-05-03 17:52 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-03 17:50 - 2018-06-29 22:01 - 000000000 ____D C:\Users\Public\Logi
2019-05-02 22:14 - 2016-04-01 19:20 - 000000000 ____D C:\Users\User007\Documents\Heroes of the Storm
2019-05-02 20:24 - 2016-04-27 20:57 - 000000000 ____D C:\Users\User007\AppData\Local\CrashDumps
2019-05-02 18:48 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-01 23:12 - 2018-10-06 09:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-05-01 16:52 - 2016-03-31 21:59 - 000000000 ____D C:\Users\User007\AppData\Roaming\vlc
2019-05-01 10:08 - 2017-10-18 18:36 - 000000000 ____D C:\Users\User007\AppData\Local\Packages
2019-05-01 01:28 - 2016-03-31 20:04 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-30 20:30 - 2017-04-07 18:54 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2019-04-30 20:18 - 2017-11-20 19:36 - 000000000 ____D C:\Program Files (x86)\Origin
2019-04-29 20:27 - 2016-04-09 16:29 - 000000000 ____D C:\Users\User007\AppData\Roaming\uTorrent
2019-04-25 18:07 - 2017-08-03 10:13 - 000000000 ____D C:\Program Files (x86)\StarCraft II
2019-04-24 16:38 - 2017-04-07 18:53 - 000000000 ____D C:\Users\User007\AppData\Roaming\Battle.net
2019-04-24 16:37 - 2018-10-06 09:27 - 001693636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-24 16:37 - 2018-09-15 19:32 - 000716776 _____ C:\WINDOWS\system32\perfh005.dat
2019-04-24 16:37 - 2018-09-15 19:32 - 000144856 _____ C:\WINDOWS\system32\perfc005.dat
2019-04-24 16:31 - 2018-10-06 09:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-24 16:30 - 2019-02-13 18:45 - 000257832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-04-24 16:30 - 2019-01-14 19:48 - 000254128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000320624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000196000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000057888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000037104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-04-24 16:30 - 2018-10-19 20:11 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-04-24 16:30 - 2018-10-06 09:24 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-04-24 16:30 - 2018-09-15 09:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-04-24 16:30 - 2018-09-15 08:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-04-24 16:30 - 2018-08-03 20:53 - 000476776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-04-24 16:30 - 2017-11-09 19:26 - 000205400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 001031000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000385848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000220640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000166848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000088160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-04-24 16:30 - 2016-03-31 20:31 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-24 16:28 - 2018-11-28 21:25 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-04-23 22:38 - 2017-04-21 16:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-04-23 20:51 - 2016-03-31 20:42 - 000000000 ____D C:\Users\User007\AppData\Local\Blizzard Entertainment
2019-04-23 20:27 - 2016-03-29 19:26 - 000000000 ____D C:\Temp
2019-04-23 20:25 - 2018-11-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2019-04-23 18:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-04-23 18:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-04-23 18:02 - 2017-10-06 18:56 - 000000000 ____D C:\Users\User007\AppData\Roaming\steelseries-engine-3-client
2019-04-22 19:55 - 2016-09-10 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-04-22 19:55 - 2016-09-10 10:23 - 000000000 ____D C:\Program Files (x86)\Java
2019-04-22 19:54 - 2017-07-22 09:07 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2019-04-19 20:09 - 2016-10-23 14:00 - 000000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2019-04-19 10:06 - 2018-04-05 18:22 - 000000000 ____D C:\Users\User007\AppData\Local\AVAST Software
2019-04-18 19:02 - 2019-03-25 17:14 - 000654272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2019-04-18 15:57 - 2018-10-15 22:34 - 005083376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2019-04-18 15:57 - 2018-10-15 22:34 - 004340480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2019-04-18 01:25 - 2018-10-15 19:36 - 001682368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2019-04-18 01:25 - 2018-10-15 19:36 - 000228608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2019-04-18 01:25 - 2018-10-15 19:03 - 000052255 _____ C:\WINDOWS\system32\nvinfo.pb
2019-04-17 23:08 - 2018-11-28 21:31 - 005432360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 002637808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 001767280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000651248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000450872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000125424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000082800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2019-04-14 10:54 - 2016-04-05 19:39 - 000000000 ____D C:\Users\User007\Documents\The Witcher 3
2019-04-14 07:20 - 2018-11-28 21:31 - 008557932 _____ C:\WINDOWS\system32\nvcoproc.bin
2019-04-12 22:24 - 2018-10-06 09:19 - 000002412 _____ C:\Users\User007\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-04-11 19:07 - 2018-11-28 21:25 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2019-04-11 19:03 - 2018-10-06 09:17 - 000533360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-10 23:18 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-10 18:28 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-10 18:26 - 2016-03-29 19:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-10 18:24 - 2016-03-29 19:13 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-04-06 13:30 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\system32\Dism

==================== Files in the root of some directories =======

2017-03-04 20:22 - 2017-03-04 20:22 - 000001167 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.1.txt
2017-03-04 20:22 - 2017-03-04 20:24 - 000000905 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.txt
2017-03-04 20:22 - 2017-03-04 20:24 - 000000000 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-03-29 19:10 - 2016-03-31 11:47 - 001065984 _____ () C:\Users\User007\AppData\Local\file__0.localstorage
2016-03-31 21:03 - 2016-03-31 21:03 - 000000017 _____ () C:\Users\User007\AppData\Local\resmon.resmoncfg

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(24.59 KiB) Staženo 67 x

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Re: Velké využití RAM už po startu Windows 10

#3 Příspěvek od VelkejPitomec »

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-29.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-04-2019
# Duration: 00:00:01
# OS: Windows 10 Home
# Cleaned: 11
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Deleted HKCU\Software\csastats
Deleted HKLM\Software\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2364 octets] - [04/05/2019 11:25:59]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#4 Příspěvek od Rudy »

OK. Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Re: Velké využití RAM už po startu Windows 10

#5 Příspěvek od VelkejPitomec »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-05.2019
Ran by User007 (administrator) on DESKTOP-4S44MO1 (MSI MS-7850) (04-05-2019 12:58:10)
Running from C:\Users\User007\Desktop
Loaded Profiles: User007 (Available Profiles: User007)
Platform: Windows 10 Home Version 1809 17763.437 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19041.481.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(ALCPU -> ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6685\Agent.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe
(Electronic Arts, Inc. -> ) C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
(Electronic Arts, Inc. -> ) C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\User007\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Ubisoft Entertainment Sweden AB -> Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
(Ubisoft Entertainment Sweden AB -> Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) D:\Steam\Steam.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18630280 2018-05-07] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26278576 2019-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1266872 2019-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Steam] => D:\Steam\steam.exe [3152160 2019-04-30] (Valve -> Valve Corporation)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Discord] => C:\Users\User007\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Ubisoft Game Launcher] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe [470872 2019-04-23] (Ubisoft Entertainment Sweden AB -> Ubisoft)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [EpicGamesLauncher] => "D:\Epic Games\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3114256 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Blizzard App\Battle.net.exe [1098728 2019-04-30] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\...\RunOnce: [Application Restart #3] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKU\S-1-5-21-2217625539-489516872-413406719-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [807424 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-01] (Google LLC -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2019-04-23]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {034AB790-3CB2-4FA1-8477-2CEC79C7621A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {071EBA52-2C1E-4839-A254-1117E790F09A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [112672 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {09FFAE7F-F312-42A7-9FEE-C4FED790107B} - System32\Tasks\KiN SF => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {0AA57232-01B2-4FB6-BA63-F658CD4F7A69} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {0CF66747-7623-491B-A562-CE9E18FDBCDB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4382048 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {1738A680-D42C-4AE5-9093-2DD1765C324C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1439368 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B6C7F2F-D47B-4A4D-899E-2B9F6A557570} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [495136 2014-12-05] (LG Electronics Inc. -> LG Electronics Inc.)
Task: {27428F8D-F1A2-49D4-9E7E-B4ACC5528761} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [1328392 2015-11-20] (Intel(R) Software -> Intel Corporation)
Task: {2B55A48E-F885-4C93-B02E-04E9A2D13E08} - System32\Tasks\Core Temp Autostart User007 => C:\Program Files\Core Temp\Core Temp.exe [998488 2019-01-08] (ALCPU -> ALCPU)
Task: {2F2D3D55-D18B-4A2A-862D-A68B35F769C5} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {33DB3DDC-9C90-4FD0-AF89-5B66DC12F467} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648048 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E7B47FE-6AEE-492F-869E-CA982BCF07EA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {441C93B0-C73F-4610-AAF6-9D00927C6DF1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [590704 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {670B2624-8B08-4614-89A7-E4C008E25816} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3728752 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68B34136-3C96-49B3-90FB-EC86819F56ED} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe
Task: {6F07C126-A9D8-4CB1-BE92-D93A5F303717} - System32\Tasks\MSILEDKeeper_Host => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe [851128 2018-08-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {80803625-3A6C-4998-A136-9FF2CBAFF44C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {8C6ABE5A-DE49-451E-BC22-FEDF5829C28A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-04-23] (Adobe Inc. -> Adobe)
Task: {962B14A2-0E49-4AA6-8D18-81A51DF5DFAC} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [739624 2018-04-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {A200FFDE-2065-4CCD-B330-8E576C09DE5E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4382048 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD60DACD-0C4A-4332-B523-2B1925587A4C} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF63F6EC-CF00-43AD-A5D1-A230DBCAE514} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2925960 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {BA5E82E0-21AD-43C7-97B9-037A6A28CE73} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {BAD55592-ABE5-490B-9AEA-4A85609E85AB} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BB4051F5-D82A-42C7-AEDC-3337AFC749F8} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C5522710-9919-48B4-B4B9-88AD0A0C2A0A} - System32\Tasks\MSISW_Host => C:\WINDOWS\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {CCB1CE4E-789B-4A76-90DC-B610E874F299} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CECF2105-B3D8-451F-8CAE-E1D26BC92ACC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [112672 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {D6F5A5AC-804B-4561-B26B-093C96B2E265} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D8463A80-49EC-4417-BAE1-1633C5351EB1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DB600790-BC3F-4267-B512-EE6B19D141E2} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DE819F9A-32DB-41E2-A751-3A849B5EE2B3} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2380088 2019-04-06] (AVAST Software s.r.o. -> AVAST Software)
Task: {E64AAC8D-7318-4CD4-9A7D-154E6062FF47} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {EB02E818-5536-4867-987B-18737FCD038C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_pepper.exe [1452600 2019-04-23] (Adobe Inc. -> Adobe)
Task: {F73FF976-53C9-49D4-9235-1948BF3B591B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1439368 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {F744CD91-8EB1-4C72-95F2-88F8AF027020} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FC815288-958D-4D00-8587-30D8B6386E8F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2a0de96e-6bd4-402c-a579-4c0b8f1d417d}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a216f975-0bd8-43ec-852e-b6e636b1585c}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2217625539-489516872-413406719-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR DefaultProfile: Default
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default [2019-05-04]
CHR Extension: (BetterTTV) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-12-06]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-20]
CHR Extension: (Tipli do prohlížeče) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbnfnbehhjknomdbfhcobpgpphnlnikp [2019-03-15]
CHR Extension: (AdBlock) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-04-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\User007\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-24]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-27] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11146240 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-09] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-03-02] (FUTUREMARK INC -> Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [58792 2016-01-28] (Intel(R) SBA -> Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-05-07] (Logitech Inc -> Logitech Inc.)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [3894760 2017-10-19] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [2020024 2019-01-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2323120 2019-04-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.)
R2 MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [31928 2018-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2303792 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3175216 2019-04-30] (Electronic Arts, Inc. -> Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3830128 2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [110944 2018-09-15] (Microsoft Corporation -> Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18264 2017-02-23] (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation)
S3 DAUpdaterSvc; D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [X]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ALSysIO; C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys [46384 2019-05-04] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ATTENTION
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37104 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205400 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254128 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320624 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [57888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-07] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [257832 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [166848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88160 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1031000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476776 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220640 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [385848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-08-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-08-14] (Disc Soft Ltd -> Disc Soft Ltd)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation -> Intel Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-05-07] (Logitech Inc -> Logitech Inc.)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\MysticLight\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ed316ebc2bdc1c66\nvlddmkm.sys [21657024 2019-04-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-03-28] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [66792 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1122200 2018-08-30] (Realtek Semiconductor Corp. -> Realtek )
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46776 2018-12-21] (SteelSeries ApS -> )
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [48032 2018-12-21] (SteelSeries ApS -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 UcmCxUcsiNvppc; C:\WINDOWS\System32\drivers\UcmCxUcsiNvppc.sys [462000 2019-04-18] (NVIDIA Corporation -> NVIDIA Corporation)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [47616 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46584 2018-09-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [340008 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [61992 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54352 2016-08-18] (Intel Corporation -> Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-04 12:58 - 2019-05-04 12:58 - 000037370 _____ C:\Users\User007\Desktop\FRST.txt
2019-05-04 11:25 - 2019-05-04 11:26 - 000000000 ____D C:\AdwCleaner
2019-05-04 11:24 - 2019-05-04 11:24 - 007025360 _____ (Malwarebytes) C:\Users\User007\Downloads\adwcleaner_7.3.exe
2019-05-04 10:32 - 2019-05-04 10:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2019-05-04 10:20 - 2019-05-04 10:22 - 000135247 _____ C:\Users\User007\Downloads\Addition.txt
2019-05-04 10:19 - 2019-05-04 12:58 - 000000000 ____D C:\FRST
2019-05-04 10:19 - 2019-05-04 10:22 - 000107981 _____ C:\Users\User007\Downloads\FRST.txt
2019-05-04 10:18 - 2019-05-04 10:18 - 002430464 _____ (Farbar) C:\Users\User007\Desktop\FRST64.exe
2019-05-04 09:24 - 2019-05-04 09:24 - 000000000 ___HD C:\OneDriveTemp
2019-04-26 20:28 - 2019-04-26 20:28 - 016624232 _____ (Moritz Bunkus) C:\Users\User007\Downloads\mkvtoolnix-64-bit-33.1.0-setup.exe
2019-04-24 16:30 - 2019-04-24 16:30 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 001006800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 001006800 _____ C:\WINDOWS\system32\vulkan-1.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000552328 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000456904 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2019-04-23 20:24 - 2019-04-18 19:04 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-04-23 20:24 - 2019-04-18 19:04 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2019-04-23 20:24 - 2019-04-18 19:03 - 011048896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-04-23 20:24 - 2019-04-18 19:03 - 009485192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 002039176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001722064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6443039.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001540032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001470208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001467648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6443039.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001162176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 001134288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000911808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000821128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000808656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000675024 _____ C:\WINDOWS\system32\nvofapi64.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000631040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000541904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2019-04-23 20:24 - 2019-04-18 19:02 - 000522120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 040412368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 035269568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 020187584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 017464712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 005421768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2019-04-23 20:24 - 2019-04-18 19:01 - 004758736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2019-04-23 20:24 - 2019-04-18 01:25 - 001477008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvppcgenco64_1127831.dll
2019-04-23 20:24 - 2019-04-18 01:25 - 000462000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\UcmCxUcsiNvppc.sys
2019-04-23 20:24 - 2019-04-18 01:25 - 000046848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2019-04-23 18:33 - 2019-05-04 12:56 - 000003784 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-04-23 18:33 - 2019-05-04 12:56 - 000003488 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2019-04-23 18:32 - 2019-04-23 18:32 - 021104696 _____ (Adobe) C:\Users\User007\Downloads\install_flash_player_ppapi.exe
2019-04-19 20:40 - 2019-04-22 12:12 - 000000000 ____D C:\Users\User007\AppData\Local\STAR WARS Battlefront II
2019-04-14 14:49 - 2019-04-14 14:59 - 000000000 ____D C:\Users\User007\Desktop\How To Train Your Dragon The Hidden World (2019) [BluRay] [1080p] [YTS.AM]
2019-04-12 18:05 - 2019-04-24 16:30 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-11 19:12 - 2019-04-10 16:52 - 001734288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6442531.dll
2019-04-11 19:12 - 2019-04-10 16:52 - 001467864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6442531.dll
2019-04-11 19:06 - 2019-04-23 20:27 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-04-10 18:27 - 2019-04-10 18:27 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 012843520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 012139008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 007877120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 007645608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 006544824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 006071296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 005436904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 004660224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 004588536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 003657728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 003551112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002720256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002469376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 002438368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 002022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001671352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001590064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001496576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001478968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001467344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001044280 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-10 18:27 - 2019-04-10 18:27 - 001019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000865784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000793832 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000725928 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000653040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000474928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-04-10 18:27 - 2019-04-10 18:27 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000263600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-10 18:27 - 2019-04-10 18:27 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-04-10 18:27 - 2019-04-10 18:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-04-06 15:23 - 2019-04-26 20:25 - 000000000 ____D C:\Users\User007\Desktop\Robin Hood (2018) [WEBRip] [1080p] [YTS.AM]
2019-04-06 09:05 - 2019-04-06 09:05 - 017513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 015223296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 008898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007919104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 005765120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 005205448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004991112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004704272 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004527624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 004304896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003690496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003496448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003421696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 003377976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 002842624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002701304 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002627384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 002592816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002275896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 002017792 _____ C:\WINDOWS\system32\rdpnano.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001994768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001856000 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001697752 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001647632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001615872 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001567232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001468952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001459080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001458056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001370624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001360184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001311232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001297120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001294520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-04-06 09:05 - 2019-04-06 09:05 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001191728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001179680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001155072 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001133568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001072424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-04-06 09:05 - 2019-04-06 09:05 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 001053192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000998712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000984888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000982880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000974352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000909840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-04-06 09:05 - 2019-04-06 09:05 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000821048 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000809784 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000675096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000620560 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000598544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-04-06 09:05 - 2019-04-06 09:05 - 000540448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000508208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000506168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000485192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-04-06 09:05 - 2019-04-06 09:05 - 000408528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000386360 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000384312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000343984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000312632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000306488 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000283032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000257696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000255128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000234808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000159272 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000147496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000143880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000134456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000131384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000115360 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000097808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-06 09:05 - 2019-04-06 09:05 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-06 09:05 - 2019-04-06 09:05 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-04 12:57 - 2017-04-07 18:54 - 000000000 ____D C:\Users\User007\AppData\Local\Battle.net
2019-05-04 12:56 - 2018-11-28 19:53 - 000002206 _____ C:\WINDOWS\System32\Tasks\MSILEDKeeper_Host
2019-05-04 12:56 - 2018-11-28 19:53 - 000002148 _____ C:\WINDOWS\System32\Tasks\MSISW_Host
2019-05-04 12:56 - 2018-11-28 19:48 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000003196 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000003152 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-11-28 19:48 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-05-04 12:56 - 2018-10-06 09:24 - 000003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-05-04 12:56 - 2018-10-06 09:24 - 000003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-05-04 12:56 - 2018-10-06 09:24 - 000002948 _____ C:\WINDOWS\System32\Tasks\KiN SF
2019-05-04 12:56 - 2018-10-06 09:24 - 000002854 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2217625539-489516872-413406719-1001
2019-05-04 12:56 - 2018-10-06 09:24 - 000002562 _____ C:\WINDOWS\System32\Tasks\SmartShare
2019-05-04 12:56 - 2018-10-06 09:24 - 000002440 _____ C:\WINDOWS\System32\Tasks\Core Temp Autostart User007
2019-05-04 12:56 - 2018-10-06 09:24 - 000002430 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2019-05-04 12:56 - 2018-10-06 09:24 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-05-04 12:54 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-04 12:09 - 2016-03-29 19:06 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2019-05-04 12:09 - 2016-03-29 19:06 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2019-05-04 11:37 - 2018-10-06 09:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-05-04 11:32 - 2018-10-06 09:27 - 001693636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-05-04 11:32 - 2018-09-15 19:32 - 000716776 _____ C:\WINDOWS\system32\perfh005.dat
2019-05-04 11:32 - 2018-09-15 19:32 - 000144856 _____ C:\WINDOWS\system32\perfc005.dat
2019-05-04 11:32 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF
2019-05-04 11:28 - 2017-11-20 19:36 - 000000000 ____D C:\Users\User007\AppData\Roaming\Origin
2019-05-04 11:27 - 2018-11-28 21:25 - 000000000 ____D C:\ProgramData\NVIDIA
2019-05-04 11:27 - 2017-11-20 19:34 - 000000000 ____D C:\ProgramData\Origin
2019-05-04 11:27 - 2016-04-01 20:23 - 000000000 ____D C:\Users\User007\AppData\Local\Ubisoft Game Launcher
2019-05-04 11:27 - 2016-03-29 19:05 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2019-05-04 11:27 - 2016-03-29 18:57 - 000000000 ___RD C:\Users\User007\OneDrive
2019-05-04 11:26 - 2018-10-06 09:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-05-04 11:26 - 2018-09-15 08:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-05-04 11:23 - 2016-07-10 18:46 - 000000000 ____D C:\Users\User007\AppData\Roaming\discord
2019-05-04 10:32 - 2016-04-01 21:18 - 000000000 ____D C:\Program Files\Macrium
2019-05-04 10:32 - 2016-04-01 20:58 - 000000000 ____D C:\ProgramData\Macrium
2019-05-04 09:29 - 2019-02-16 19:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-05-03 23:38 - 2016-10-23 14:00 - 000000000 ____D C:\Users\User007\AppData\Roaming\TS3Client
2019-05-03 18:12 - 2018-11-28 19:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2019-05-03 18:12 - 2018-11-28 19:53 - 000000000 ____D C:\MSI
2019-05-03 18:12 - 2016-03-31 20:00 - 000000000 ____D C:\Program Files (x86)\MSI
2019-05-03 17:52 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-03 17:50 - 2018-06-29 22:01 - 000000000 ____D C:\Users\Public\Logi
2019-05-02 22:14 - 2016-04-01 19:20 - 000000000 ____D C:\Users\User007\Documents\Heroes of the Storm
2019-05-02 20:24 - 2016-04-27 20:57 - 000000000 ____D C:\Users\User007\AppData\Local\CrashDumps
2019-05-02 18:48 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-01 16:52 - 2016-03-31 21:59 - 000000000 ____D C:\Users\User007\AppData\Roaming\vlc
2019-05-01 10:08 - 2017-10-18 18:36 - 000000000 ____D C:\Users\User007\AppData\Local\Packages
2019-05-01 01:28 - 2016-03-31 20:04 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-30 20:30 - 2017-04-07 18:54 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2019-04-30 20:18 - 2017-11-20 19:36 - 000000000 ____D C:\Program Files (x86)\Origin
2019-04-29 20:27 - 2016-04-09 16:29 - 000000000 ____D C:\Users\User007\AppData\Roaming\uTorrent
2019-04-25 18:07 - 2017-08-03 10:13 - 000000000 ____D C:\Program Files (x86)\StarCraft II
2019-04-24 16:38 - 2017-04-07 18:53 - 000000000 ____D C:\Users\User007\AppData\Roaming\Battle.net
2019-04-24 16:30 - 2019-02-13 18:45 - 000257832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-04-24 16:30 - 2019-01-14 19:48 - 000254128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000320624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000196000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000057888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-04-24 16:30 - 2019-01-07 19:37 - 000037104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-04-24 16:30 - 2018-10-19 20:11 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-04-24 16:30 - 2018-10-06 09:24 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-04-24 16:30 - 2018-09-15 09:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-04-24 16:30 - 2018-08-03 20:53 - 000476776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-04-24 16:30 - 2017-11-09 19:26 - 000205400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 001031000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000385848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000220640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000166848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-04-24 16:30 - 2016-03-31 20:34 - 000088160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-04-24 16:30 - 2016-03-31 20:31 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-24 16:28 - 2018-11-28 21:25 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-04-23 22:38 - 2017-04-21 16:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-04-23 20:51 - 2016-03-31 20:42 - 000000000 ____D C:\Users\User007\AppData\Local\Blizzard Entertainment
2019-04-23 20:27 - 2016-03-29 19:26 - 000000000 ____D C:\Temp
2019-04-23 20:25 - 2018-11-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2019-04-23 18:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-04-23 18:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-04-23 18:02 - 2017-10-06 18:56 - 000000000 ____D C:\Users\User007\AppData\Roaming\steelseries-engine-3-client
2019-04-22 19:55 - 2016-09-10 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-04-22 19:55 - 2016-09-10 10:23 - 000000000 ____D C:\Program Files (x86)\Java
2019-04-22 19:54 - 2017-07-22 09:07 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2019-04-19 20:09 - 2016-10-23 14:00 - 000000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2019-04-19 10:06 - 2018-04-05 18:22 - 000000000 ____D C:\Users\User007\AppData\Local\AVAST Software
2019-04-18 19:02 - 2019-03-25 17:14 - 000654272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2019-04-18 15:57 - 2018-10-15 22:34 - 005083376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2019-04-18 15:57 - 2018-10-15 22:34 - 004340480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2019-04-18 01:25 - 2018-10-15 19:36 - 001682368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2019-04-18 01:25 - 2018-10-15 19:36 - 000228608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2019-04-18 01:25 - 2018-10-15 19:03 - 000052255 _____ C:\WINDOWS\system32\nvinfo.pb
2019-04-17 23:08 - 2018-11-28 21:31 - 005432360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 002637808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 001767280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000651248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000450872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000125424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2019-04-17 23:08 - 2018-11-28 21:31 - 000082800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2019-04-14 10:54 - 2016-04-05 19:39 - 000000000 ____D C:\Users\User007\Documents\The Witcher 3
2019-04-14 07:20 - 2018-11-28 21:31 - 008557932 _____ C:\WINDOWS\system32\nvcoproc.bin
2019-04-12 22:24 - 2018-10-06 09:19 - 000002412 _____ C:\Users\User007\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-04-11 19:07 - 2018-11-28 21:25 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2019-04-11 19:03 - 2018-10-06 09:17 - 000533360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-10 23:18 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-10 18:28 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-10 18:26 - 2016-03-29 19:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-10 18:24 - 2016-03-29 19:13 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-04-06 13:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-04-06 13:30 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\system32\Dism

==================== Files in the root of some directories =======

2017-03-04 20:22 - 2017-03-04 20:22 - 000001167 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.1.txt
2017-03-04 20:22 - 2017-03-04 20:24 - 000000905 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.txt
2017-03-04 20:22 - 2017-03-04 20:24 - 000000000 _____ () C:\Users\User007\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-03-29 19:10 - 2016-03-31 11:47 - 001065984 _____ () C:\Users\User007\AppData\Local\file__0.localstorage
2016-03-31 21:03 - 2016-03-31 21:03 - 000000017 _____ () C:\Users\User007\AppData\Local\resmon.resmoncfg

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(23.73 KiB) Staženo 45 x

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {034AB790-3CB2-4FA1-8477-2CEC79C7621A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {2F2D3D55-D18B-4A2A-862D-A68B35F769C5} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {80803625-3A6C-4998-A136-9FF2CBAFF44C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
R3 ALSysIO; C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys [46384 2019-05-04] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ATTENTION
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
AlternateDataStreams: C:\Users\Public\AppData:CSM [474]
AlternateDataStreams: C:\Users\User007\AppData\Local\Temp:$DATA​ [34]
FirewallRules: [{93ED4251-F05A-4416-B4B3-114DD5F54C4F}] => (Allow) D:\Steam\steamapps\common\Borderlands_2_RU\Binaries\Win32\Launcher.exe No File
FirewallRules: [{AD193C71-06B1-43ED-94B9-F9BCC4D2ADD0}] => (Allow) D:\Steam\steamapps\common\Borderlands_2_RU\Binaries\Win32\Launcher.exe No File
FirewallRules: [UDP Query User{42D73B5E-4EE0-442D-942E-402E1AF1F30E}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{61638494-A6D7-4EE4-B71A-2FFF4E1346C7}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{544C5F46-6EE7-4D72-A785-03E8F10713D9}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe No File
FirewallRules: [TCP Query User{384C46CC-E1AC-4A6C-A046-4985E6E3B42D}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe No File
FirewallRules: [UDP Query User{6356C0DC-DEFD-4FE5-B11F-EB8B5B7A55EC}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{0B2C9478-BA1E-401E-AB17-A8A2810BD3A3}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe No File
FirewallRules: [{C63C689D-D38D-4066-97D5-54E71D65117F}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe No File
FirewallRules: [{E13EABD1-8831-48B2-8379-8956851E1A7A}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe No File
FirewallRules: [UDP Query User{80B4869E-D969-42A0-8B4A-F7207F540CA9}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E1B8329C-E8A0-4434-B84E-A19C08CE160C}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{DF304F6A-7284-4893-A349-48AABE3943D6}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E2C073FA-D960-4634-93F2-2EAABF7A7ABE}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B9943833-6067-42FF-80C0-2B5AD49F3AA7}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{28434CF1-D5AF-4F4A-AB15-0A089D74FD86}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D572A364-E9AB-4946-968B-1FB03C3A5FBF}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe No File
FirewallRules: [TCP Query User{FD6B80F8-386D-41A2-8075-85F5C3A50F24}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe No File
FirewallRules: [UDP Query User{6038D37A-17E5-48B2-8A5C-E56BE7C966A3}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe No File
FirewallRules: [TCP Query User{04C17D35-F0C7-4782-97F6-CF61C8B1943C}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe No File
FirewallRules: [UDP Query User{EAE1FF82-6F77-4527-92D8-432B89AF4119}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{239EED84-C64A-4A84-AAA9-27240F289659}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{4E11A0D7-0852-4603-A111-D9CDFACBC82D}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F9F6A69E-0175-4C26-8CB0-C2FB2735489F}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{7360E178-3952-421A-9BAF-3AE42382E0FA}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe No File
FirewallRules: [TCP Query User{DCA10392-69AA-45E1-AC08-20DE52B99148}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe No File
FirewallRules: [UDP Query User{F4DC6A2D-B9EB-44AE-AA76-8C422E47F8A7}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DA796052-9457-43F3-8F7E-A909CBE05C2B}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{70BD1BC6-008B-4310-90F1-C0BFEE941CE4}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{50567A54-4B6C-49D9-920D-03BF34BD8CAB}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{2E2A2B04-447C-454E-B75D-C841BFE1D6D3}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{5E2C0E77-2162-4DB1-9850-79FF5543BB9F}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{991AA792-C019-49A1-9027-FDC4EC4E0252}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{731A2D69-6AD4-4CD5-B61A-64848BA28B2D}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{7FF32E6D-6886-4B57-8CDE-5325C51D29C3}C:\users\user007\desktop\release (3)\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (3)\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{59D9245F-946A-4454-BEDD-8C516A261BA4}C:\users\user007\desktop\release (3)\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (3)\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{15A431F8-EDD9-46EE-8F06-A798C52B4457}C:\users\user007\downloads\release(1)\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{24C208E1-D165-4440-9B47-C325B0449589}C:\users\user007\downloads\release(1)\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{7C6FEAE2-B8B1-46D2-904A-717F51CABA64}C:\users\user007\downloads\release(1)\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\necrobot.exe No File
FirewallRules: [TCP Query User{7FB85AF0-9122-4C0A-99C7-D4F8FD79C21A}C:\users\user007\downloads\release(1)\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\necrobot.exe No File
FirewallRules: [UDP Query User{A8A0E4BB-C2A6-4C75-A937-86A764476E02}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{792E2010-51AC-44DD-81D1-047026212B6C}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{88C7B57C-BE6F-4845-88CA-676FA54ECB90}C:\users\user007\downloads\release\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release\release\necrobot.exe No File
FirewallRules: [TCP Query User{ABFAC4C8-E67D-4AF3-BD03-3021C2BFA8C3}C:\users\user007\downloads\release\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release\release\necrobot.exe No File
FirewallRules: [UDP Query User{6A41080C-3F66-4B4C-B600-6D5CCD6811B6}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe No File
FirewallRules: [TCP Query User{C0CB5C4C-0B85-4E7B-A83D-F076FAE3F458}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe No File
FirewallRules: [UDP Query User{41F8D7E4-CF16-4A7F-BF11-75E1B9CDC3A5}C:\users\user007\desktop\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\desktop\release\pogo.necrobot.cli.exe No File
FirewallRules: [TCP Query User{D312967E-A4C3-4047-85CC-DEDEE94A4264}C:\users\user007\desktop\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\desktop\release\pogo.necrobot.cli.exe No File
FirewallRules: [{C2B37AC6-2B0D-43EB-850A-F360159F2680}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [{D31E38EF-5F00-4EE6-8F13-1FC7065385FE}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [{F56A4C09-7DD3-4762-976D-66CD9AEC593D}] => (Allow) D:\Steam\steamapps\common\Limbo\limbo.exe (Playdead) [File not signed]
FirewallRules: [{C8786C0D-775F-4133-AAD2-1AF928AEC1C1}] => (Allow) D:\Steam\steamapps\common\Limbo\limbo.exe (Playdead) [File not signed]
FirewallRules: [{5AE182CF-505E-4688-ADB3-08414E8EE4F4}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\POP.EXE No File
FirewallRules: [{D6B80623-0591-491F-9E3E-5DF5A4264939}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\POP.EXE No File
FirewallRules: [{87B9F128-F163-4DC2-BEB4-AF9FF7F145D3}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\PrinceOfPersia.EXE No File
FirewallRules: [{06FB3A39-5AEE-4B3B-86BE-F1D92F0AA648}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\PrinceOfPersia.EXE No File
FirewallRules: [UDP Query User{5064E8D1-347E-44BA-85D1-148B7330938D}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{9F1A606F-E418-4C55-BD94-EC145125DA6B}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{7D4FB377-99D1-44EC-848D-A3DC59357250}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{1FA87237-E286-4129-B781-50AC20490680}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe No File
FirewallRules: [{B0A3A0D5-A5A6-48A5-814B-EB2E7126D1BD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{7ED515D3-283A-44A0-872B-A59DE57D09AF}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [UDP Query User{F7355B4F-AA9F-47C2-AAE8-5C7B6040251C}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{66F2BFC7-1592-4B5C-9957-49894E771D3F}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{78E0A2B6-D4BC-4024-8227-73F916DE5915}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{C33CEE36-AB58-425A-8C72-AABFF9845D6F}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{113B88CB-B2A8-4207-951A-E6C79E7EE691}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{9A8FD8C6-6166-4BC2-A032-3307767285BB}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{541884BF-4ED3-43BA-B82B-6C8ED42CB245}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{63882FC1-D08A-4370-9A97-C2CED4000346}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{122A59A7-1549-4C68-9EEF-7835E2ADBB69}D:\strongdc++\strongdc.exe] => (Allow) D:\strongdc++\strongdc.exe No File
FirewallRules: [TCP Query User{75F3CFC7-9353-4156-A9C3-0389E9E33E22}D:\strongdc++\strongdc.exe] => (Allow) D:\strongdc++\strongdc.exe No File
FirewallRules: [{F167CA82-6557-4B27-8054-82D5589114D7}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{BC7DDC40-DCA0-4EE6-B4CD-8FB44A692A91}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{9B7F9652-1A8B-49F1-8C8F-4299774804D3}] => (Allow) D:\League of Legends\lol.launcher.admin.exe No File
FirewallRules: [{6C814803-6736-4833-AB71-3296E5B272D2}] => (Allow) D:\League of Legends\lol.launcher.exe No File
FirewallRules: [UDP Query User{43CCEA1F-74EF-4FC6-BFF2-0EA170B83B77}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E57FF360-4379-4316-BF12-4A8A37831E0B}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe No File
FirewallRules: [{34911A19-15CC-44F1-A454-1B54946C74F8}] => (Allow) D:\Steam\bin\steamwebhelper.exe No File
FirewallRules: [{2A33C403-022D-46CC-A830-46653826937B}] => (Allow) D:\Steam\bin\steamwebhelper.exe No File
FirewallRules: [TCP Query User{16A054A3-ADCD-4FB0-8BBE-FF0C0AD904BF}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{48E30B23-2CC9-4FD3-9A9B-E0C99459EF7F}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{0D88083F-830C-4D10-9003-D62726B6C218}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{ACCF0DA5-DE0E-408D-8DC9-DFBEFCB960D7}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{D46B8912-D13E-4E49-A0E4-4B90C9D83460}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{59F2EEAA-C41A-44A2-95C8-648151E712CC}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{0453CE09-1F03-4650-A57D-ED5919A9B5D2}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D3C407B8-6037-47B2-8774-7BEA4D943C0A}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F3F2D4AF-AF51-4AFA-89EF-FCA9E338F8A4}C:\users\user007\downloads\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{91A978FC-8AD1-4FBD-85A4-01FA8215A624}C:\users\user007\downloads\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{F0CCC162-70D4-427D-8841-D1F6587099D9}C:\users\user007\downloads\release (1)\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release (1)\pokemobbot.exe No File
FirewallRules: [UDP Query User{C04A1ABD-B128-4DBA-81C2-C3BFEE123343}C:\users\user007\downloads\release (1)\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release (1)\pokemobbot.exe No File
FirewallRules: [{740EA148-C9F1-485E-900F-FCE999AAA56F}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe No File
FirewallRules: [{BB929041-6DBE-4A8F-861D-AA6102829FE3}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe No File
FirewallRules: [{E0F82B81-58DC-4C8A-A97B-E3CEEB0E544D}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe No File
FirewallRules: [{6F5F8696-E64B-427C-8935-DDD01A20622E}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe No File
FirewallRules: [TCP Query User{8DDA124A-43A8-423D-B9A9-0168660047C8}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe No File
FirewallRules: [UDP Query User{C2FC54B9-AB0E-43E3-B667-C4D3099ECE5C}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe No File
FirewallRules: [TCP Query User{9234D1CE-583A-4B7B-A363-E07F031C436C}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe No File
FirewallRules: [UDP Query User{3925A71C-7B64-4A6F-9547-482881F3D660}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe No File
FirewallRules: [{4A2FCAEB-F8C8-4DE8-8712-B6A1526C620C}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe No File
FirewallRules: [{71E64453-0A63-4C88-9807-E3898E900573}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe No File
FirewallRules: [TCP Query User{72132E22-C918-4908-9352-23B6DF06474E}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{30DD6515-E0E6-4887-8689-17FDE6FCB8D6}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7375A639-A903-4D90-82B9-366BDA302790}D:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) D:\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]
FirewallRules: [UDP Query User{55E7F118-3EF8-4C64-9460-23A3829B624B}D:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) D:\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]
FirewallRules: [TCP Query User{2BC1C940-5701-40C7-B1E7-04FA36DBBE5E}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{F601CFFD-88E7-49CE-8665-C2DE59EE6AC5}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7499E9D6-80EA-4CB4-8EDB-26C26647841B}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe No File
FirewallRules: [UDP Query User{30C0F3D9-5337-4EA3-800B-3F29D6D54E8A}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe No File
FirewallRules: [TCP Query User{DCEC9B96-6C2C-45AD-9938-E4DA05BCC925}D:\diablo iii\x64\diablo iii64.exe] => (Allow) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{B2978D0F-66D8-481D-B48E-938F70524929}D:\diablo iii\x64\diablo iii64.exe] => (Allow) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{1964AF89-9FDF-461E-90A3-A759CCC10BAF}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe No File
FirewallRules: [UDP Query User{710D6D35-8191-46AD-A797-96BBDD0B46CE}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe No File
FirewallRules: [TCP Query User{812C0B13-899B-4CD4-9E1D-DEA24CCFF658}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe No File
FirewallRules: [UDP Query User{A2DE9BA1-9A50-4F64-AEF4-EEDACE395A23}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe No File
FirewallRules: [TCP Query User{BA88F8B7-5366-4020-A99B-395C1CC2D9F4}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{89B9BB9D-39F5-4E25-9044-DA7E4DAD6877}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3248E888-46E7-4DB9-BA0F-DC611E587CFE}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{A5A3FB6A-FB6A-462F-B46A-A2BE3A7DDE9F}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{0B0BD055-AE86-49E3-B877-E3DD8C1C120A}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5783AD30-DA5D-4498-8771-212BB1B0CEFD}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{D93046ED-091D-4411-80C6-1435A683B366}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe] => (Allow) D:\ubisoft game launcher\games\rayman origins\rayman origins.exe No File
FirewallRules: [UDP Query User{C93E46A9-9018-4930-A5BE-F158CAA41092}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe] => (Allow) D:\ubisoft game launcher\games\rayman origins\rayman origins.exe No File
FirewallRules: [TCP Query User{A97E3303-7C09-4A49-B428-FA1F45099718}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8C2A9EDC-6DFB-4E3C-BC1C-322A72E79440}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F4FD134D-735F-43A3-83E8-104E77CC1701}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe No File
FirewallRules: [UDP Query User{3F90D0AF-99E1-4A5F-874D-CB865B3A5FC4}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe No File
FirewallRules: [TCP Query User{1B34BA0C-490A-4E9B-9996-AAD7FF7424E2}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe No File
FirewallRules: [UDP Query User{8923668F-EA94-4DF2-957C-1DF65001158B}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe No File
FirewallRules: [TCP Query User{87A1435F-D5AB-4953-B9A2-8CE348A6DD6C}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BA74F366-80E6-4565-B3E3-667130410A70}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe No File
FirewallRules: [{BBE8D6AB-15B7-4554-8D42-883493311411}] => (Allow) D:\Nová složka\Tom Clancy's The Division\TheDivision.exe No File
FirewallRules: [{FB856A36-70C0-473C-94B8-F3B943667EC6}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3SP.exe No File
FirewallRules: [{4EB2128D-25DD-41CF-AC44-1DF15D2C6890}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3SP.exe No File
FirewallRules: [{1D83AB88-9C23-4509-8E45-DC25EAD1EB19}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3MP.exe No File
FirewallRules: [{7B2931A9-24D3-4E5C-94B5-EACBC853B47E}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3MP.exe No File
FirewallRules: [{A8BB2F5B-92DB-4D3D-BD17-55BDA581A3A9}] => (Allow) D:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe () [File not signed]
FirewallRules: [{6ED75705-EEB2-4A01-930F-E8306F77119C}] => (Allow) D:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe () [File not signed]
FirewallRules: [TCP Query User{B0228E2E-EAE7-4A32-B172-0AC9F8C1DAD2}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B9D1CE44-C62A-45BE-934C-F217B601C7CB}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{04ACC86B-8FE9-41BC-8AB2-3E2F0BD12947}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe No File
FirewallRules: [UDP Query User{EA8AF8D2-F6E7-46ED-8D04-5C1A563F973D}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe No File
FirewallRules: [TCP Query User{5730CBE2-A7B8-449D-87B1-963E16BFDE74}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{6B59D17C-3876-4A1E-9F4E-C032A77DE326}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{EF89007E-C796-4870-92F5-A41E467FCCE1}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe No File
FirewallRules: [UDP Query User{BE4BDEAC-E62C-446A-9F31-B764027FD59A}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe No File
FirewallRules: [TCP Query User{436E8BDF-1738-4902-8FE8-85FECD57FF7C}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D9FFF4D8-8BB5-4DAD-A2A8-AF1B816C494F}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3DADB428-84BE-4FE6-B9A4-645EC55478AF}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{0938E052-EA19-4052-9996-C9BD861BC8DC}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{A7520F60-985A-4150-9ADE-93B7B2B4EBE7}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe No File
FirewallRules: [UDP Query User{E215CBF5-B8DE-4A75-98BF-4683A6F35E29}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe No File
FirewallRules: [TCP Query User{0BB6CEF6-DED5-4EA6-B0DE-D6CDAB74668A}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D33D64AC-9AE5-40E7-BFF7-5A5BCEB3876E}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{09052050-B321-4EF0-AB5C-F8BA7FC60A24}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe No File
FirewallRules: [UDP Query User{9F17D201-9316-42C2-9509-C37F45106DAF}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe No File
FirewallRules: [TCP Query User{000DBB5D-8070-41C0-89D7-30615E91A41F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{6C096652-8D16-4962-A88D-C129101F355F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe No File
FirewallRules: [{1B66AA5C-1BBF-4812-98D2-FFC842851002}] => (Allow) D:\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.)
FirewallRules: [{D28D171A-E4A8-4646-BDC4-AFC86E2213F9}] => (Allow) D:\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.)
FirewallRules: [{87BBD4DA-826A-46C7-A3EF-DF38B43CB2C3}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe No File
FirewallRules: [{A42D5BAD-CC3F-4E2D-B6E1-9D9E8C8BD44C}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe No File
FirewallRules: [TCP Query User{2D379503-968B-45D4-96FF-9B9A285B4BFD}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{0E900554-D3B5-4DF6-876C-2B9EE3BF4A09}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{EF670EA1-A8E4-4045-8739-1787BF1498A7}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe No File
FirewallRules: [UDP Query User{954C2865-C86B-4B76-AA25-593A5D3F3041}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe No File
FirewallRules: [TCP Query User{778F3786-5082-4DB5-B08B-7FA507903C27}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{FE42C476-A58F-4F63-B10A-DACBC49C43C8}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{CA23D60B-429F-418D-807A-C6C240D2AE5F}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{EA82EECD-1996-4DC8-9E3C-4E53A70FB489}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DB59CE41-0549-484B-952E-67F2FAFA8B5C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{1804BD5D-6599-4016-AC53-CA006459B76C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F0199650-8A67-4992-9FFB-7E71126F1C46}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{C9A63013-76E3-41C9-BE92-C98D430A4BD8}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{01D0E02A-D1BD-4EDD-8697-A17D8B4760D8}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe No File
FirewallRules: [UDP Query User{8DFB1123-D03C-4AB7-B415-2D742162F859}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe No File
FirewallRules: [TCP Query User{0CBFB194-0511-4EE4-8B93-1AF87B2A10F9}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8FB46018-AC9A-4E5A-A43B-F50F3B0F55EF}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7F88D63F-44E5-4B4B-B761-88E2C0EEA4BB}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{38E57C98-61DD-4518-908A-67F8C137BDA8}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{096FC07F-382A-4B2B-A526-5940564A0F6C}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B8068610-4B45-4BE5-90C1-E4F1B2857D64}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7BD2F056-C181-43D7-BCDD-5E7F16C984F3}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{4A5E5BF3-9A49-4319-9872-F4FF4B4B8AA1}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3B3A6183-5001-4AAC-8149-68F96BC892F2}D:\ubisoft games\assassin's creed iii\ac3sp.exe] => (Allow) D:\ubisoft games\assassin's creed iii\ac3sp.exe No File
FirewallRules: [UDP Query User{AC205C09-435B-4E0F-B20B-6D15D31FEE97}D:\ubisoft games\assassin's creed iii\ac3sp.exe] => (Allow) D:\ubisoft games\assassin's creed iii\ac3sp.exe No File
FirewallRules: [TCP Query User{FC352D25-0EB9-4817-BEDF-A67570155167}D:\ubisoft games\assassin's creed iii\ac3mp.exe] => (Block) D:\ubisoft games\assassin's creed iii\ac3mp.exe No File
FirewallRules: [UDP Query User{4A42F362-1F27-4D2F-AF75-1FDFE82E0747}D:\ubisoft games\assassin's creed iii\ac3mp.exe] => (Block) D:\ubisoft games\assassin's creed iii\ac3mp.exe No File
FirewallRules: [TCP Query User{5794629F-D912-48C6-BB91-C6FF5C32FFB6}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{80165ED4-16D2-4DD3-A3D4-B90EF6F3B77E}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3C58DF06-A789-4C53-8FE4-7F3FB81C260C}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{AB3232DF-E603-4AC0-9810-01955DB34F57}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{6D4CA6A6-A243-49DA-BF14-A1441DEAC124}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{09E2FBD6-110C-4970-B525-A6FD63EC2A1D}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{887E3DF6-C23A-4C4A-90A5-F1C625E1B786}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{00D74579-3FF5-4392-B5F5-268E2B4FBE27}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{117ED6AC-8448-493E-942B-585CA8DFB713}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{3C6BDC0E-423C-475B-8D54-AFAB6D0DF8F1}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{28812A4C-4F61-4641-836C-90D3C212AADD}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{92659253-8BCC-4002-B76C-B8BE38BD2ACF}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7925E4FE-97A9-4D14-83AE-11DBA2509E44}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{69C3811E-CD8E-4A52-9010-EAC35BDADC38}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{3FB1BF42-C3C2-41E6-9B97-4121FEB4E8BB}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{A966F5A2-C8CF-46FA-BF39-77683F6E488D}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{EF369FFE-33FB-4269-A000-B2ED712FB9FF}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [UDP Query User{6380C527-F893-4A3F-9A2D-57328977B85A}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [TCP Query User{82727FCB-93AD-4750-AABA-394579BBE984}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D3867AE4-825F-498B-B0A5-0B90296702F6}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{5793053F-BEB6-4345-BAD3-43B60352C0F6}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{C4EE66A4-5BAE-45BF-9AF7-9AC1A387BDBA}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe No File
FirewallRules: [{A7A22C1A-913B-441C-8805-1AF236316A95}] => (Allow) D:\Steam\steamapps\common\Resident Evil 4\Bin32\bio4.exe No File
FirewallRules: [{197B4B93-CF68-417A-A093-A8D480192F96}] => (Allow) D:\Steam\steamapps\common\Resident Evil 4\Bin32\bio4.exe No File
FirewallRules: [TCP Query User{904A717A-BA1D-4160-BAE2-FCFE30F3F8C3}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BE87592B-7DD8-4612-ADAD-4E6CC5306828}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{33F416F8-51E6-4EE3-BA82-66500D96A35B}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{654AEC83-F428-44D0-8C34-A6EAB5CA778A}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe No File
FirewallRules: [{0D988A3E-8CC1-4042-850A-92EF841A98F9}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Game.exe No File
FirewallRules: [{E0A29E4F-C57D-41E1-8000-4A9212B248DE}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Game.exe No File
FirewallRules: [{20A70371-ADD8-4BCF-8919-636FF46E9581}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Setup.exe No File
FirewallRules: [{6D037C3F-2DE1-44B0-BC1E-33818C9F66A9}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Setup.exe No File
FirewallRules: [TCP Query User{D982119E-74A1-4C0E-B136-3CDCA34F34EF}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe No File
FirewallRules: [UDP Query User{A68C9FFD-AFB4-4EFE-A723-25DAD286AF1C}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe No File
FirewallRules: [TCP Query User{82795002-B420-4D0C-9FD3-4AB135C88C6C}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{F4EA4DD0-E613-42F5-87F9-CD8C758E97F4}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{8832C8AB-E56E-4D1E-BD17-7EBBF1036F2D}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{AC9D4E61-168A-4C63-8C09-B464D1A677D4}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E8591DC7-CF87-4AA8-87B4-84B57C9C9989}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe No File
FirewallRules: [UDP Query User{5297EB7B-3333-46A1-8B7B-C55D71ED8D3D}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe No File
FirewallRules: [TCP Query User{37E2876E-4516-4C5A-99DA-5C4B7A3A0280}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{CF9DB37F-CD99-4649-B4AD-8DF10A2520AD}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{541271F8-CF37-44E5-A918-49F53F7BC016}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{38227AAB-9380-465A-B40E-3FFC95BC9C31}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{B44D0F8C-FCAF-4928-BCA6-F765E65D9B65}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5193C11C-2D74-4F31-92C0-A91508B0A1F2}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{4FDBED34-BDAA-4189-B786-6441CACDCB82}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B5AA01CB-69FF-4D1B-AD31-A93300A025F6}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{80FAB4A4-D965-4CD6-8154-2A6485469D15}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe No File
FirewallRules: [UDP Query User{4EA3460C-AB0E-4321-A690-A23DFF5CEB5D}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe No File
FirewallRules: [TCP Query User{305EC580-7F8D-40B0-83C8-077E5EE35B06}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{552B3F79-9795-4C2D-B5F1-353492B7C190}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{4E64D7B2-6782-4333-8C34-06A3029D1A45}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{E2E2D14C-F867-4800-A899-208A26281BB1}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{A5417B9E-2ABB-443C-8019-1946D0059A5C}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5A4DC5EA-9DED-47A1-BB2D-021444E80F4F}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{942C6320-9743-4860-8276-60DE6BD8E236}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{3C92D566-C440-46A7-A51C-693DBAA9CFC9}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{A3987470-644D-4307-994C-53B64C6B3994}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{A69FBD12-7755-47BD-84BA-58D9F1F9B5B5}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{578B9342-0367-472F-AB6B-3C27CB9B927E}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8EE75125-972C-41A8-B7FF-2CE05B2AB305}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DE8AC6ED-2CB4-48B2-B2B0-FBF94B358E69}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe No File
FirewallRules: [UDP Query User{87FC334D-1188-47B8-93B6-B5CBCFF1CBD4}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe No File
FirewallRules: [TCP Query User{D197C664-B2DD-46F9-AAA9-AEC45F25A5D0}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BB11B7E5-F657-4A6C-9D25-795E0E2358DC}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{360C2738-392A-4003-AE66-0E635F01FBB5}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{2D6ECB5B-BCAD-49A7-9918-6FAE2AE8A00D}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{FE13EA00-D9F1-4F6E-9A21-BCA8354F0BE9}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{DE3370F5-0BCB-408A-BA91-9335B98351AA}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{D14AE3DA-042B-4D6E-8A92-5004ABCCCEBD}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{EB55683F-605A-4785-A10E-BBAF170B9A25}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{35CBB580-0B89-42C0-8182-46CBE89D69E3}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{3E831CCD-8C6F-4EFF-9148-8C0C765DCEE8}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe No File

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Re: Velké využití RAM už po startu Windows 10

#7 Příspěvek od VelkejPitomec »

Fix result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019 01
Ran by User007 (04-05-2019 18:12:40) Run:1
Running from C:\Users\User007\Desktop
Loaded Profiles: User007 (Available Profiles: User007)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {034AB790-3CB2-4FA1-8477-2CEC79C7621A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
Task: {2F2D3D55-D18B-4A2A-862D-A68B35F769C5} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {80803625-3A6C-4998-A136-9FF2CBAFF44C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-03-31] (Google Inc -> Google Inc.)
R3 ALSysIO; C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys [46384 2019-05-04] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ATTENTION
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
AlternateDataStreams: C:\Users\Public\AppData:CSM [474]
AlternateDataStreams: C:\Users\User007\AppData\Local\Temp:$DATA? [34]
FirewallRules: [{93ED4251-F05A-4416-B4B3-114DD5F54C4F}] => (Allow) D:\Steam\steamapps\common\Borderlands_2_RU\Binaries\Win32\Launcher.exe No File
FirewallRules: [{AD193C71-06B1-43ED-94B9-F9BCC4D2ADD0}] => (Allow) D:\Steam\steamapps\common\Borderlands_2_RU\Binaries\Win32\Launcher.exe No File
FirewallRules: [UDP Query User{42D73B5E-4EE0-442D-942E-402E1AF1F30E}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{61638494-A6D7-4EE4-B71A-2FFF4E1346C7}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{544C5F46-6EE7-4D72-A785-03E8F10713D9}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe No File
FirewallRules: [TCP Query User{384C46CC-E1AC-4A6C-A046-4985E6E3B42D}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe No File
FirewallRules: [UDP Query User{6356C0DC-DEFD-4FE5-B11F-EB8B5B7A55EC}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{0B2C9478-BA1E-401E-AB17-A8A2810BD3A3}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe No File
FirewallRules: [{C63C689D-D38D-4066-97D5-54E71D65117F}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe No File
FirewallRules: [{E13EABD1-8831-48B2-8379-8956851E1A7A}] => (Allow) D:\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe No File
FirewallRules: [UDP Query User{80B4869E-D969-42A0-8B4A-F7207F540CA9}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E1B8329C-E8A0-4434-B84E-A19C08CE160C}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{DF304F6A-7284-4893-A349-48AABE3943D6}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E2C073FA-D960-4634-93F2-2EAABF7A7ABE}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B9943833-6067-42FF-80C0-2B5AD49F3AA7}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{28434CF1-D5AF-4F4A-AB15-0A089D74FD86}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D572A364-E9AB-4946-968B-1FB03C3A5FBF}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe No File
FirewallRules: [TCP Query User{FD6B80F8-386D-41A2-8075-85F5C3A50F24}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe No File
FirewallRules: [UDP Query User{6038D37A-17E5-48B2-8A5C-E56BE7C966A3}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe No File
FirewallRules: [TCP Query User{04C17D35-F0C7-4782-97F6-CF61C8B1943C}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe No File
FirewallRules: [UDP Query User{EAE1FF82-6F77-4527-92D8-432B89AF4119}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{239EED84-C64A-4A84-AAA9-27240F289659}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{4E11A0D7-0852-4603-A111-D9CDFACBC82D}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F9F6A69E-0175-4C26-8CB0-C2FB2735489F}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{7360E178-3952-421A-9BAF-3AE42382E0FA}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe No File
FirewallRules: [TCP Query User{DCA10392-69AA-45E1-AC08-20DE52B99148}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe No File
FirewallRules: [UDP Query User{F4DC6A2D-B9EB-44AE-AA76-8C422E47F8A7}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DA796052-9457-43F3-8F7E-A909CBE05C2B}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{70BD1BC6-008B-4310-90F1-C0BFEE941CE4}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{50567A54-4B6C-49D9-920D-03BF34BD8CAB}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{2E2A2B04-447C-454E-B75D-C841BFE1D6D3}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{5E2C0E77-2162-4DB1-9850-79FF5543BB9F}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{991AA792-C019-49A1-9027-FDC4EC4E0252}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{731A2D69-6AD4-4CD5-B61A-64848BA28B2D}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{7FF32E6D-6886-4B57-8CDE-5325C51D29C3}C:\users\user007\desktop\release (3)\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (3)\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{59D9245F-946A-4454-BEDD-8C516A261BA4}C:\users\user007\desktop\release (3)\release\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release (3)\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{15A431F8-EDD9-46EE-8F06-A798C52B4457}C:\users\user007\downloads\release(1)\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{24C208E1-D165-4440-9B47-C325B0449589}C:\users\user007\downloads\release(1)\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{7C6FEAE2-B8B1-46D2-904A-717F51CABA64}C:\users\user007\downloads\release(1)\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\necrobot.exe No File
FirewallRules: [TCP Query User{7FB85AF0-9122-4C0A-99C7-D4F8FD79C21A}C:\users\user007\downloads\release(1)\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release(1)\release\necrobot.exe No File
FirewallRules: [UDP Query User{A8A0E4BB-C2A6-4C75-A937-86A764476E02}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{792E2010-51AC-44DD-81D1-047026212B6C}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{88C7B57C-BE6F-4845-88CA-676FA54ECB90}C:\users\user007\downloads\release\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release\release\necrobot.exe No File
FirewallRules: [TCP Query User{ABFAC4C8-E67D-4AF3-BD03-3021C2BFA8C3}C:\users\user007\downloads\release\release\necrobot.exe] => (Allow) C:\users\user007\downloads\release\release\necrobot.exe No File
FirewallRules: [UDP Query User{6A41080C-3F66-4B4C-B600-6D5CCD6811B6}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe No File
FirewallRules: [TCP Query User{C0CB5C4C-0B85-4E7B-A83D-F076FAE3F458}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe No File
FirewallRules: [UDP Query User{41F8D7E4-CF16-4A7F-BF11-75E1B9CDC3A5}C:\users\user007\desktop\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\desktop\release\pogo.necrobot.cli.exe No File
FirewallRules: [TCP Query User{D312967E-A4C3-4047-85CC-DEDEE94A4264}C:\users\user007\desktop\release\pogo.necrobot.cli.exe] => (Allow) C:\users\user007\desktop\release\pogo.necrobot.cli.exe No File
FirewallRules: [{C2B37AC6-2B0D-43EB-850A-F360159F2680}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [{D31E38EF-5F00-4EE6-8F13-1FC7065385FE}] => (Allow) D:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [{F56A4C09-7DD3-4762-976D-66CD9AEC593D}] => (Allow) D:\Steam\steamapps\common\Limbo\limbo.exe (Playdead) [File not signed]
FirewallRules: [{C8786C0D-775F-4133-AAD2-1AF928AEC1C1}] => (Allow) D:\Steam\steamapps\common\Limbo\limbo.exe (Playdead) [File not signed]
FirewallRules: [{5AE182CF-505E-4688-ADB3-08414E8EE4F4}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\POP.EXE No File
FirewallRules: [{D6B80623-0591-491F-9E3E-5DF5A4264939}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\POP.EXE No File
FirewallRules: [{87B9F128-F163-4DC2-BEB4-AF9FF7F145D3}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\PrinceOfPersia.EXE No File
FirewallRules: [{06FB3A39-5AEE-4B3B-86BE-F1D92F0AA648}] => (Allow) D:\Ubisoft Game Launcher\games\Prince of Persia Sands of Time\PrinceOfPersia.EXE No File
FirewallRules: [UDP Query User{5064E8D1-347E-44BA-85D1-148B7330938D}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{9F1A606F-E418-4C55-BD94-EC145125DA6B}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{7D4FB377-99D1-44EC-848D-A3DC59357250}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{1FA87237-E286-4129-B781-50AC20490680}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe No File
FirewallRules: [{B0A3A0D5-A5A6-48A5-814B-EB2E7126D1BD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{7ED515D3-283A-44A0-872B-A59DE57D09AF}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [UDP Query User{F7355B4F-AA9F-47C2-AAE8-5C7B6040251C}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{66F2BFC7-1592-4B5C-9957-49894E771D3F}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{78E0A2B6-D4BC-4024-8227-73F916DE5915}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{C33CEE36-AB58-425A-8C72-AABFF9845D6F}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{113B88CB-B2A8-4207-951A-E6C79E7EE691}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{9A8FD8C6-6166-4BC2-A032-3307767285BB}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{541884BF-4ED3-43BA-B82B-6C8ED42CB245}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{63882FC1-D08A-4370-9A97-C2CED4000346}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{122A59A7-1549-4C68-9EEF-7835E2ADBB69}D:\strongdc++\strongdc.exe] => (Allow) D:\strongdc++\strongdc.exe No File
FirewallRules: [TCP Query User{75F3CFC7-9353-4156-A9C3-0389E9E33E22}D:\strongdc++\strongdc.exe] => (Allow) D:\strongdc++\strongdc.exe No File
FirewallRules: [{F167CA82-6557-4B27-8054-82D5589114D7}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{BC7DDC40-DCA0-4EE6-B4CD-8FB44A692A91}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{9B7F9652-1A8B-49F1-8C8F-4299774804D3}] => (Allow) D:\League of Legends\lol.launcher.admin.exe No File
FirewallRules: [{6C814803-6736-4833-AB71-3296E5B272D2}] => (Allow) D:\League of Legends\lol.launcher.exe No File
FirewallRules: [UDP Query User{43CCEA1F-74EF-4FC6-BFF2-0EA170B83B77}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E57FF360-4379-4316-BF12-4A8A37831E0B}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe No File
FirewallRules: [{34911A19-15CC-44F1-A454-1B54946C74F8}] => (Allow) D:\Steam\bin\steamwebhelper.exe No File
FirewallRules: [{2A33C403-022D-46CC-A830-46653826937B}] => (Allow) D:\Steam\bin\steamwebhelper.exe No File
FirewallRules: [TCP Query User{16A054A3-ADCD-4FB0-8BBE-FF0C0AD904BF}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{48E30B23-2CC9-4FD3-9A9B-E0C99459EF7F}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{0D88083F-830C-4D10-9003-D62726B6C218}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{ACCF0DA5-DE0E-408D-8DC9-DFBEFCB960D7}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{D46B8912-D13E-4E49-A0E4-4B90C9D83460}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [UDP Query User{59F2EEAA-C41A-44A2-95C8-648151E712CC}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe] => (Allow) H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe No File
FirewallRules: [TCP Query User{0453CE09-1F03-4650-A57D-ED5919A9B5D2}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D3C407B8-6037-47B2-8774-7BEA4D943C0A}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F3F2D4AF-AF51-4AFA-89EF-FCA9E338F8A4}C:\users\user007\downloads\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release\pokemobbot.exe No File
FirewallRules: [UDP Query User{91A978FC-8AD1-4FBD-85A4-01FA8215A624}C:\users\user007\downloads\release\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release\pokemobbot.exe No File
FirewallRules: [TCP Query User{F0CCC162-70D4-427D-8841-D1F6587099D9}C:\users\user007\downloads\release (1)\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release (1)\pokemobbot.exe No File
FirewallRules: [UDP Query User{C04A1ABD-B128-4DBA-81C2-C3BFEE123343}C:\users\user007\downloads\release (1)\pokemobbot.exe] => (Allow) C:\users\user007\downloads\release (1)\pokemobbot.exe No File
FirewallRules: [{740EA148-C9F1-485E-900F-FCE999AAA56F}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe No File
FirewallRules: [{BB929041-6DBE-4A8F-861D-AA6102829FE3}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe No File
FirewallRules: [{E0F82B81-58DC-4C8A-A97B-E3CEEB0E544D}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe No File
FirewallRules: [{6F5F8696-E64B-427C-8935-DDD01A20622E}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe No File
FirewallRules: [TCP Query User{8DDA124A-43A8-423D-B9A9-0168660047C8}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe No File
FirewallRules: [UDP Query User{C2FC54B9-AB0E-43E3-B667-C4D3099ECE5C}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe No File
FirewallRules: [TCP Query User{9234D1CE-583A-4B7B-A363-E07F031C436C}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe No File
FirewallRules: [UDP Query User{3925A71C-7B64-4A6F-9547-482881F3D660}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe No File
FirewallRules: [{4A2FCAEB-F8C8-4DE8-8712-B6A1526C620C}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe No File
FirewallRules: [{71E64453-0A63-4C88-9807-E3898E900573}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe No File
FirewallRules: [TCP Query User{72132E22-C918-4908-9352-23B6DF06474E}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{30DD6515-E0E6-4887-8689-17FDE6FCB8D6}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7375A639-A903-4D90-82B9-366BDA302790}D:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) D:\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]
FirewallRules: [UDP Query User{55E7F118-3EF8-4C64-9460-23A3829B624B}D:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) D:\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]
FirewallRules: [TCP Query User{2BC1C940-5701-40C7-B1E7-04FA36DBBE5E}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{F601CFFD-88E7-49CE-8665-C2DE59EE6AC5}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7499E9D6-80EA-4CB4-8EDB-26C26647841B}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe No File
FirewallRules: [UDP Query User{30C0F3D9-5337-4EA3-800B-3F29D6D54E8A}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe No File
FirewallRules: [TCP Query User{DCEC9B96-6C2C-45AD-9938-E4DA05BCC925}D:\diablo iii\x64\diablo iii64.exe] => (Allow) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{B2978D0F-66D8-481D-B48E-938F70524929}D:\diablo iii\x64\diablo iii64.exe] => (Allow) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{1964AF89-9FDF-461E-90A3-A759CCC10BAF}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe No File
FirewallRules: [UDP Query User{710D6D35-8191-46AD-A797-96BBDD0B46CE}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe No File
FirewallRules: [TCP Query User{812C0B13-899B-4CD4-9E1D-DEA24CCFF658}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe No File
FirewallRules: [UDP Query User{A2DE9BA1-9A50-4F64-AEF4-EEDACE395A23}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe No File
FirewallRules: [TCP Query User{BA88F8B7-5366-4020-A99B-395C1CC2D9F4}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{89B9BB9D-39F5-4E25-9044-DA7E4DAD6877}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3248E888-46E7-4DB9-BA0F-DC611E587CFE}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{A5A3FB6A-FB6A-462F-B46A-A2BE3A7DDE9F}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{0B0BD055-AE86-49E3-B877-E3DD8C1C120A}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5783AD30-DA5D-4498-8771-212BB1B0CEFD}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{D93046ED-091D-4411-80C6-1435A683B366}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe] => (Allow) D:\ubisoft game launcher\games\rayman origins\rayman origins.exe No File
FirewallRules: [UDP Query User{C93E46A9-9018-4930-A5BE-F158CAA41092}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe] => (Allow) D:\ubisoft game launcher\games\rayman origins\rayman origins.exe No File
FirewallRules: [TCP Query User{A97E3303-7C09-4A49-B428-FA1F45099718}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8C2A9EDC-6DFB-4E3C-BC1C-322A72E79440}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F4FD134D-735F-43A3-83E8-104E77CC1701}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe No File
FirewallRules: [UDP Query User{3F90D0AF-99E1-4A5F-874D-CB865B3A5FC4}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe No File
FirewallRules: [TCP Query User{1B34BA0C-490A-4E9B-9996-AAD7FF7424E2}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe No File
FirewallRules: [UDP Query User{8923668F-EA94-4DF2-957C-1DF65001158B}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe No File
FirewallRules: [TCP Query User{87A1435F-D5AB-4953-B9A2-8CE348A6DD6C}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BA74F366-80E6-4565-B3E3-667130410A70}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe No File
FirewallRules: [{BBE8D6AB-15B7-4554-8D42-883493311411}] => (Allow) D:\Nov� slo�ka\Tom Clancy's The Division\TheDivision.exe No File
FirewallRules: [{FB856A36-70C0-473C-94B8-F3B943667EC6}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3SP.exe No File
FirewallRules: [{4EB2128D-25DD-41CF-AC44-1DF15D2C6890}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3SP.exe No File
FirewallRules: [{1D83AB88-9C23-4509-8E45-DC25EAD1EB19}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3MP.exe No File
FirewallRules: [{7B2931A9-24D3-4E5C-94B5-EACBC853B47E}] => (Allow) D:\Ubisoft games\Assassin's Creed III\AC3MP.exe No File
FirewallRules: [{A8BB2F5B-92DB-4D3D-BD17-55BDA581A3A9}] => (Allow) D:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe () [File not signed]
FirewallRules: [{6ED75705-EEB2-4A01-930F-E8306F77119C}] => (Allow) D:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe () [File not signed]
FirewallRules: [TCP Query User{B0228E2E-EAE7-4A32-B172-0AC9F8C1DAD2}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B9D1CE44-C62A-45BE-934C-F217B601C7CB}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{04ACC86B-8FE9-41BC-8AB2-3E2F0BD12947}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe No File
FirewallRules: [UDP Query User{EA8AF8D2-F6E7-46ED-8D04-5C1A563F973D}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe No File
FirewallRules: [TCP Query User{5730CBE2-A7B8-449D-87B1-963E16BFDE74}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{6B59D17C-3876-4A1E-9F4E-C032A77DE326}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{EF89007E-C796-4870-92F5-A41E467FCCE1}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe No File
FirewallRules: [UDP Query User{BE4BDEAC-E62C-446A-9F31-B764027FD59A}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe No File
FirewallRules: [TCP Query User{436E8BDF-1738-4902-8FE8-85FECD57FF7C}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D9FFF4D8-8BB5-4DAD-A2A8-AF1B816C494F}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3DADB428-84BE-4FE6-B9A4-645EC55478AF}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{0938E052-EA19-4052-9996-C9BD861BC8DC}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{A7520F60-985A-4150-9ADE-93B7B2B4EBE7}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe No File
FirewallRules: [UDP Query User{E215CBF5-B8DE-4A75-98BF-4683A6F35E29}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe No File
FirewallRules: [TCP Query User{0BB6CEF6-DED5-4EA6-B0DE-D6CDAB74668A}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D33D64AC-9AE5-40E7-BFF7-5A5BCEB3876E}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{09052050-B321-4EF0-AB5C-F8BA7FC60A24}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe No File
FirewallRules: [UDP Query User{9F17D201-9316-42C2-9509-C37F45106DAF}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe No File
FirewallRules: [TCP Query User{000DBB5D-8070-41C0-89D7-30615E91A41F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{6C096652-8D16-4962-A88D-C129101F355F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe No File
FirewallRules: [{1B66AA5C-1BBF-4812-98D2-FFC842851002}] => (Allow) D:\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.)
FirewallRules: [{D28D171A-E4A8-4646-BDC4-AFC86E2213F9}] => (Allow) D:\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.)
FirewallRules: [{87BBD4DA-826A-46C7-A3EF-DF38B43CB2C3}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe No File
FirewallRules: [{A42D5BAD-CC3F-4E2D-B6E1-9D9E8C8BD44C}] => (Allow) D:\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe No File
FirewallRules: [TCP Query User{2D379503-968B-45D4-96FF-9B9A285B4BFD}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{0E900554-D3B5-4DF6-876C-2B9EE3BF4A09}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{EF670EA1-A8E4-4045-8739-1787BF1498A7}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe No File
FirewallRules: [UDP Query User{954C2865-C86B-4B76-AA25-593A5D3F3041}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe No File
FirewallRules: [TCP Query User{778F3786-5082-4DB5-B08B-7FA507903C27}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{FE42C476-A58F-4F63-B10A-DACBC49C43C8}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{CA23D60B-429F-418D-807A-C6C240D2AE5F}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{EA82EECD-1996-4DC8-9E3C-4E53A70FB489}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DB59CE41-0549-484B-952E-67F2FAFA8B5C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{1804BD5D-6599-4016-AC53-CA006459B76C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{F0199650-8A67-4992-9FFB-7E71126F1C46}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{C9A63013-76E3-41C9-BE92-C98D430A4BD8}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{01D0E02A-D1BD-4EDD-8697-A17D8B4760D8}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe No File
FirewallRules: [UDP Query User{8DFB1123-D03C-4AB7-B415-2D742162F859}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe No File
FirewallRules: [TCP Query User{0CBFB194-0511-4EE4-8B93-1AF87B2A10F9}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8FB46018-AC9A-4E5A-A43B-F50F3B0F55EF}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7F88D63F-44E5-4B4B-B761-88E2C0EEA4BB}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{38E57C98-61DD-4518-908A-67F8C137BDA8}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{096FC07F-382A-4B2B-A526-5940564A0F6C}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B8068610-4B45-4BE5-90C1-E4F1B2857D64}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7BD2F056-C181-43D7-BCDD-5E7F16C984F3}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{4A5E5BF3-9A49-4319-9872-F4FF4B4B8AA1}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3B3A6183-5001-4AAC-8149-68F96BC892F2}D:\ubisoft games\assassin's creed iii\ac3sp.exe] => (Allow) D:\ubisoft games\assassin's creed iii\ac3sp.exe No File
FirewallRules: [UDP Query User{AC205C09-435B-4E0F-B20B-6D15D31FEE97}D:\ubisoft games\assassin's creed iii\ac3sp.exe] => (Allow) D:\ubisoft games\assassin's creed iii\ac3sp.exe No File
FirewallRules: [TCP Query User{FC352D25-0EB9-4817-BEDF-A67570155167}D:\ubisoft games\assassin's creed iii\ac3mp.exe] => (Block) D:\ubisoft games\assassin's creed iii\ac3mp.exe No File
FirewallRules: [UDP Query User{4A42F362-1F27-4D2F-AF75-1FDFE82E0747}D:\ubisoft games\assassin's creed iii\ac3mp.exe] => (Block) D:\ubisoft games\assassin's creed iii\ac3mp.exe No File
FirewallRules: [TCP Query User{5794629F-D912-48C6-BB91-C6FF5C32FFB6}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{80165ED4-16D2-4DD3-A3D4-B90EF6F3B77E}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{3C58DF06-A789-4C53-8FE4-7F3FB81C260C}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{AB3232DF-E603-4AC0-9810-01955DB34F57}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{6D4CA6A6-A243-49DA-BF14-A1441DEAC124}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{09E2FBD6-110C-4970-B525-A6FD63EC2A1D}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{887E3DF6-C23A-4C4A-90A5-F1C625E1B786}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{00D74579-3FF5-4392-B5F5-268E2B4FBE27}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{117ED6AC-8448-493E-942B-585CA8DFB713}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{3C6BDC0E-423C-475B-8D54-AFAB6D0DF8F1}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{28812A4C-4F61-4641-836C-90D3C212AADD}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{92659253-8BCC-4002-B76C-B8BE38BD2ACF}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{7925E4FE-97A9-4D14-83AE-11DBA2509E44}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{69C3811E-CD8E-4A52-9010-EAC35BDADC38}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{3FB1BF42-C3C2-41E6-9B97-4121FEB4E8BB}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{A966F5A2-C8CF-46FA-BF39-77683F6E488D}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{EF369FFE-33FB-4269-A000-B2ED712FB9FF}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [UDP Query User{6380C527-F893-4A3F-9A2D-57328977B85A}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [TCP Query User{82727FCB-93AD-4750-AABA-394579BBE984}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{D3867AE4-825F-498B-B0A5-0B90296702F6}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{5793053F-BEB6-4345-BAD3-43B60352C0F6}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{C4EE66A4-5BAE-45BF-9AF7-9AC1A387BDBA}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe No File
FirewallRules: [{A7A22C1A-913B-441C-8805-1AF236316A95}] => (Allow) D:\Steam\steamapps\common\Resident Evil 4\Bin32\bio4.exe No File
FirewallRules: [{197B4B93-CF68-417A-A093-A8D480192F96}] => (Allow) D:\Steam\steamapps\common\Resident Evil 4\Bin32\bio4.exe No File
FirewallRules: [TCP Query User{904A717A-BA1D-4160-BAE2-FCFE30F3F8C3}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BE87592B-7DD8-4612-ADAD-4E6CC5306828}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{33F416F8-51E6-4EE3-BA82-66500D96A35B}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{654AEC83-F428-44D0-8C34-A6EAB5CA778A}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe No File
FirewallRules: [{0D988A3E-8CC1-4042-850A-92EF841A98F9}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Game.exe No File
FirewallRules: [{E0A29E4F-C57D-41E1-8000-4A9212B248DE}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Game.exe No File
FirewallRules: [{20A70371-ADD8-4BCF-8919-636FF46E9581}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Setup.exe No File
FirewallRules: [{6D037C3F-2DE1-44B0-BC1E-33818C9F66A9}] => (Allow) D:\Steam\steamapps\common\Mafia\Mafia\Setup.exe No File
FirewallRules: [TCP Query User{D982119E-74A1-4C0E-B136-3CDCA34F34EF}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe No File
FirewallRules: [UDP Query User{A68C9FFD-AFB4-4EFE-A723-25DAD286AF1C}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe No File
FirewallRules: [TCP Query User{82795002-B420-4D0C-9FD3-4AB135C88C6C}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{F4EA4DD0-E613-42F5-87F9-CD8C758E97F4}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{8832C8AB-E56E-4D1E-BD17-7EBBF1036F2D}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{AC9D4E61-168A-4C63-8C09-B464D1A677D4}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{E8591DC7-CF87-4AA8-87B4-84B57C9C9989}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe No File
FirewallRules: [UDP Query User{5297EB7B-3333-46A1-8B7B-C55D71ED8D3D}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe No File
FirewallRules: [TCP Query User{37E2876E-4516-4C5A-99DA-5C4B7A3A0280}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{CF9DB37F-CD99-4649-B4AD-8DF10A2520AD}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{541271F8-CF37-44E5-A918-49F53F7BC016}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{38227AAB-9380-465A-B40E-3FFC95BC9C31}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{B44D0F8C-FCAF-4928-BCA6-F765E65D9B65}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5193C11C-2D74-4F31-92C0-A91508B0A1F2}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{4FDBED34-BDAA-4189-B786-6441CACDCB82}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{B5AA01CB-69FF-4D1B-AD31-A93300A025F6}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{80FAB4A4-D965-4CD6-8154-2A6485469D15}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe No File
FirewallRules: [UDP Query User{4EA3460C-AB0E-4321-A690-A23DFF5CEB5D}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe No File
FirewallRules: [TCP Query User{305EC580-7F8D-40B0-83C8-077E5EE35B06}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{552B3F79-9795-4C2D-B5F1-353492B7C190}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{4E64D7B2-6782-4333-8C34-06A3029D1A45}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{E2E2D14C-F867-4800-A899-208A26281BB1}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{A5417B9E-2ABB-443C-8019-1946D0059A5C}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{5A4DC5EA-9DED-47A1-BB2D-021444E80F4F}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{942C6320-9743-4860-8276-60DE6BD8E236}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{3C92D566-C440-46A7-A51C-693DBAA9CFC9}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{A3987470-644D-4307-994C-53B64C6B3994}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{A69FBD12-7755-47BD-84BA-58D9F1F9B5B5}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{578B9342-0367-472F-AB6B-3C27CB9B927E}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{8EE75125-972C-41A8-B7FF-2CE05B2AB305}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{DE8AC6ED-2CB4-48B2-B2B0-FBF94B358E69}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe No File
FirewallRules: [UDP Query User{87FC334D-1188-47B8-93B6-B5CBCFF1CBD4}D:\origin\apex\r5apex.exe] => (Allow) D:\origin\apex\r5apex.exe No File
FirewallRules: [TCP Query User{D197C664-B2DD-46F9-AAA9-AEC45F25A5D0}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{BB11B7E5-F657-4A6C-9D25-795E0E2358DC}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{360C2738-392A-4003-AE66-0E635F01FBB5}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{2D6ECB5B-BCAD-49A7-9918-6FAE2AE8A00D}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{FE13EA00-D9F1-4F6E-9A21-BCA8354F0BE9}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{DE3370F5-0BCB-408A-BA91-9335B98351AA}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{D14AE3DA-042B-4D6E-8A92-5004ABCCCEBD}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{EB55683F-605A-4785-A10E-BBAF170B9A25}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe No File
FirewallRules: [TCP Query User{35CBB580-0B89-42C0-8182-46CBE89D69E3}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe No File
FirewallRules: [UDP Query User{3E831CCD-8C6F-4EFF-9148-8C0C765DCEE8}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{034AB790-3CB2-4FA1-8477-2CEC79C7621A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{034AB790-3CB2-4FA1-8477-2CEC79C7621A}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2F2D3D55-D18B-4A2A-862D-A68B35F769C5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F2D3D55-D18B-4A2A-862D-A68B35F769C5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{80803625-3A6C-4998-A136-9FF2CBAFF44C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{80803625-3A6C-4998-A136-9FF2CBAFF44C}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
ALSysIO => Unable to stop service.
HKLM\System\CurrentControlSet\Services\ALSysIO => removed successfully
ALSysIO => service removed successfully
C:\WINDOWS\LastGood.Tmp => moved successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\Users\Public\AppData => ":CSM" ADS removed successfully
C:\Users\User007\AppData\Local\Temp => ":$DATA?" ADS could not remove.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{93ED4251-F05A-4416-B4B3-114DD5F54C4F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD193C71-06B1-43ED-94B9-F9BCC4D2ADD0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{42D73B5E-4EE0-442D-942E-402E1AF1F30E}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{61638494-A6D7-4EE4-B71A-2FFF4E1346C7}D:\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{544C5F46-6EE7-4D72-A785-03E8F10713D9}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{384C46CC-E1AC-4A6C-A046-4985E6E3B42D}C:\program files (x86)\blizzard app\battle.net.8965\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6356C0DC-DEFD-4FE5-B11F-EB8B5B7A55EC}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0B2C9478-BA1E-401E-AB17-A8A2810BD3A3}D:\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C63C689D-D38D-4066-97D5-54E71D65117F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E13EABD1-8831-48B2-8379-8956851E1A7A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{80B4869E-D969-42A0-8B4A-F7207F540CA9}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E1B8329C-E8A0-4434-B84E-A19C08CE160C}D:\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DF304F6A-7284-4893-A349-48AABE3943D6}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E2C073FA-D960-4634-93F2-2EAABF7A7ABE}D:\heroes of the storm public test\versions\base54098\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B9943833-6067-42FF-80C0-2B5AD49F3AA7}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{28434CF1-D5AF-4F4A-AB15-0A089D74FD86}D:\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D572A364-E9AB-4946-968B-1FB03C3A5FBF}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FD6B80F8-386D-41A2-8075-85F5C3A50F24}C:\program files (x86)\blizzard app\battle.net.8839\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6038D37A-17E5-48B2-8A5C-E56BE7C966A3}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{04C17D35-F0C7-4782-97F6-CF61C8B1943C}C:\program files (x86)\blizzard app\battle.net.8800\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EAE1FF82-6F77-4527-92D8-432B89AF4119}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{239EED84-C64A-4A84-AAA9-27240F289659}D:\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4E11A0D7-0852-4603-A111-D9CDFACBC82D}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F9F6A69E-0175-4C26-8CB0-C2FB2735489F}D:\heroes of the storm\versions\base53275\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7360E178-3952-421A-9BAF-3AE42382E0FA}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DCA10392-69AA-45E1-AC08-20DE52B99148}C:\program files (x86)\blizzard app\battle.net.8733\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F4DC6A2D-B9EB-44AE-AA76-8C422E47F8A7}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DA796052-9457-43F3-8F7E-A909CBE05C2B}D:\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{70BD1BC6-008B-4310-90F1-C0BFEE941CE4}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{50567A54-4B6C-49D9-920D-03BF34BD8CAB}D:\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2E2A2B04-447C-454E-B75D-C841BFE1D6D3}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5E2C0E77-2162-4DB1-9850-79FF5543BB9F}D:\heroes of the storm public test\versions\base52561\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{991AA792-C019-49A1-9027-FDC4EC4E0252}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{731A2D69-6AD4-4CD5-B61A-64848BA28B2D}C:\users\user007\desktop\release (1) - bot\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7FF32E6D-6886-4B57-8CDE-5325C51D29C3}C:\users\user007\desktop\release (3)\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{59D9245F-946A-4454-BEDD-8C516A261BA4}C:\users\user007\desktop\release (3)\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{15A431F8-EDD9-46EE-8F06-A798C52B4457}C:\users\user007\downloads\release(1)\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{24C208E1-D165-4440-9B47-C325B0449589}C:\users\user007\downloads\release(1)\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7C6FEAE2-B8B1-46D2-904A-717F51CABA64}C:\users\user007\downloads\release(1)\release\necrobot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7FB85AF0-9122-4C0A-99C7-D4F8FD79C21A}C:\users\user007\downloads\release(1)\release\necrobot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A8A0E4BB-C2A6-4C75-A937-86A764476E02}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{792E2010-51AC-44DD-81D1-047026212B6C}D:\heroes of the storm\versions\base44941\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{88C7B57C-BE6F-4845-88CA-676FA54ECB90}C:\users\user007\downloads\release\release\necrobot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{ABFAC4C8-E67D-4AF3-BD03-3021C2BFA8C3}C:\users\user007\downloads\release\release\necrobot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6A41080C-3F66-4B4C-B600-6D5CCD6811B6}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C0CB5C4C-0B85-4E7B-A83D-F076FAE3F458}C:\users\user007\downloads\release\release\pogo.necrobot.cli.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{41F8D7E4-CF16-4A7F-BF11-75E1B9CDC3A5}C:\users\user007\desktop\release\pogo.necrobot.cli.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D312967E-A4C3-4047-85CC-DEDEE94A4264}C:\users\user007\desktop\release\pogo.necrobot.cli.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C2B37AC6-2B0D-43EB-850A-F360159F2680}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D31E38EF-5F00-4EE6-8F13-1FC7065385FE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F56A4C09-7DD3-4762-976D-66CD9AEC593D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C8786C0D-775F-4133-AAD2-1AF928AEC1C1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5AE182CF-505E-4688-ADB3-08414E8EE4F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D6B80623-0591-491F-9E3E-5DF5A4264939}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{87B9F128-F163-4DC2-BEB4-AF9FF7F145D3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{06FB3A39-5AEE-4B3B-86BE-F1D92F0AA648}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5064E8D1-347E-44BA-85D1-148B7330938D}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9F1A606F-E418-4C55-BD94-EC145125DA6B}D:\heroes of the storm\versions\base43170\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7D4FB377-99D1-44EC-848D-A3DC59357250}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1FA87237-E286-4129-B781-50AC20490680}D:\heroes of the storm\versions\base42958\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B0A3A0D5-A5A6-48A5-814B-EB2E7126D1BD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7ED515D3-283A-44A0-872B-A59DE57D09AF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F7355B4F-AA9F-47C2-AAE8-5C7B6040251C}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{66F2BFC7-1592-4B5C-9957-49894E771D3F}D:\heroes of the storm\versions\base42506\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{78E0A2B6-D4BC-4024-8227-73F916DE5915}C:\program files\logitech gaming software\lcore.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C33CEE36-AB58-425A-8C72-AABFF9845D6F}C:\program files\logitech gaming software\lcore.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{113B88CB-B2A8-4207-951A-E6C79E7EE691}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9A8FD8C6-6166-4BC2-A032-3307767285BB}D:\heroes of the storm\versions\base42406\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{541884BF-4ED3-43BA-B82B-6C8ED42CB245}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{63882FC1-D08A-4370-9A97-C2CED4000346}D:\heroes of the storm\versions\base42273\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{122A59A7-1549-4C68-9EEF-7835E2ADBB69}D:\strongdc++\strongdc.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{75F3CFC7-9353-4156-A9C3-0389E9E33E22}D:\strongdc++\strongdc.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F167CA82-6557-4B27-8054-82D5589114D7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BC7DDC40-DCA0-4EE6-B4CD-8FB44A692A91}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9B7F9652-1A8B-49F1-8C8F-4299774804D3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6C814803-6736-4833-AB71-3296E5B272D2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{43CCEA1F-74EF-4FC6-BFF2-0EA170B83B77}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E57FF360-4379-4316-BF12-4A8A37831E0B}D:\heroes of the storm\versions\base41810\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{34911A19-15CC-44F1-A454-1B54946C74F8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2A33C403-022D-46CC-A830-46653826937B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{16A054A3-ADCD-4FB0-8BBE-FF0C0AD904BF}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{48E30B23-2CC9-4FD3-9A9B-E0C99459EF7F}C:\users\user007\desktop\release_8.8.2016\release 8.8.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0D88083F-830C-4D10-9003-D62726B6C218}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ACCF0DA5-DE0E-408D-8DC9-DFBEFCB960D7}C:\users\user007\desktop\release_8.9.2016\release 8.9.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D46B8912-D13E-4E49-A0E4-4B90C9D83460}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{59F2EEAA-C41A-44A2-95C8-648151E712CC}H:\release_8.9.2016\release 8.9.2016\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0453CE09-1F03-4650-A57D-ED5919A9B5D2}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D3C407B8-6037-47B2-8774-7BEA4D943C0A}D:\heroes of the storm\versions\base45228\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F3F2D4AF-AF51-4AFA-89EF-FCA9E338F8A4}C:\users\user007\downloads\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{91A978FC-8AD1-4FBD-85A4-01FA8215A624}C:\users\user007\downloads\release\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F0CCC162-70D4-427D-8841-D1F6587099D9}C:\users\user007\downloads\release (1)\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C04A1ABD-B128-4DBA-81C2-C3BFEE123343}C:\users\user007\downloads\release (1)\pokemobbot.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{740EA148-C9F1-485E-900F-FCE999AAA56F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BB929041-6DBE-4A8F-861D-AA6102829FE3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E0F82B81-58DC-4C8A-A97B-E3CEEB0E544D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6F5F8696-E64B-427C-8935-DDD01A20622E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8DDA124A-43A8-423D-B9A9-0168660047C8}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C2FC54B9-AB0E-43E3-B667-C4D3099ECE5C}C:\users\user007\downloads\downloader_warcraft3_reign_of_chaos_engb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9234D1CE-583A-4B7B-A363-E07F031C436C}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3925A71C-7B64-4A6F-9547-482881F3D660}C:\users\user007\downloads\downloader_warcraft3_the_frozen_throne_engb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4A2FCAEB-F8C8-4DE8-8712-B6A1526C620C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71E64453-0A63-4C88-9807-E3898E900573}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{72132E22-C918-4908-9352-23B6DF06474E}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{30DD6515-E0E6-4887-8689-17FDE6FCB8D6}D:\heroes of the storm\versions\base49076\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7375A639-A903-4D90-82B9-366BDA302790}D:\steam\steamapps\common\terraria\terrariaserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{55E7F118-3EF8-4C64-9460-23A3829B624B}D:\steam\steamapps\common\terraria\terrariaserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2BC1C940-5701-40C7-B1E7-04FA36DBBE5E}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F601CFFD-88E7-49CE-8665-C2DE59EE6AC5}D:\heroes of the storm\versions\base49278\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7499E9D6-80EA-4CB4-8EDB-26C26647841B}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{30C0F3D9-5337-4EA3-800B-3F29D6D54E8A}C:\program files (x86)\battle.net\battle.net.8265\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DCEC9B96-6C2C-45AD-9938-E4DA05BCC925}D:\diablo iii\x64\diablo iii64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B2978D0F-66D8-481D-B48E-938F70524929}D:\diablo iii\x64\diablo iii64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1964AF89-9FDF-461E-90A3-A759CCC10BAF}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{710D6D35-8191-46AD-A797-96BBDD0B46CE}C:\program files (x86)\battle.net\battle.net.8288\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{812C0B13-899B-4CD4-9E1D-DEA24CCFF658}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A2DE9BA1-9A50-4F64-AEF4-EEDACE395A23}C:\program files (x86)\battle.net\battle.net.8293\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA88F8B7-5366-4020-A99B-395C1CC2D9F4}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{89B9BB9D-39F5-4E25-9044-DA7E4DAD6877}D:\heroes of the storm\versions\base49747\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3248E888-46E7-4DB9-BA0F-DC611E587CFE}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A5A3FB6A-FB6A-462F-B46A-A2BE3A7DDE9F}D:\heroes of the storm\versions\base49907\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0B0BD055-AE86-49E3-B877-E3DD8C1C120A}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5783AD30-DA5D-4498-8771-212BB1B0CEFD}D:\heroes of the storm\versions\base50286\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D93046ED-091D-4411-80C6-1435A683B366}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C93E46A9-9018-4930-A5BE-F158CAA41092}D:\ubisoft game launcher\games\rayman origins\rayman origins.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A97E3303-7C09-4A49-B428-FA1F45099718}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8C2A9EDC-6DFB-4E3C-BC1C-322A72E79440}D:\heroes of the storm\versions\base50441\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F4FD134D-735F-43A3-83E8-104E77CC1701}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3F90D0AF-99E1-4A5F-874D-CB865B3A5FC4}C:\program files (x86)\battle.net\battle.net.8394\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1B34BA0C-490A-4E9B-9996-AAD7FF7424E2}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8923668F-EA94-4DF2-957C-1DF65001158B}C:\program files (x86)\battle.net\battle.net.8423\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{87A1435F-D5AB-4953-B9A2-8CE348A6DD6C}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BA74F366-80E6-4565-B3E3-667130410A70}D:\heroes of the storm\versions\base50950\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BBE8D6AB-15B7-4554-8D42-883493311411}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB856A36-70C0-473C-94B8-F3B943667EC6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4EB2128D-25DD-41CF-AC44-1DF15D2C6890}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1D83AB88-9C23-4509-8E45-DC25EAD1EB19}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7B2931A9-24D3-4E5C-94B5-EACBC853B47E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A8BB2F5B-92DB-4D3D-BD17-55BDA581A3A9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6ED75705-EEB2-4A01-930F-E8306F77119C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B0228E2E-EAE7-4A32-B172-0AC9F8C1DAD2}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B9D1CE44-C62A-45BE-934C-F217B601C7CB}D:\heroes of the storm\versions\base51375\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{04ACC86B-8FE9-41BC-8AB2-3E2F0BD12947}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EA8AF8D2-F6E7-46ED-8D04-5C1A563F973D}C:\program files (x86)\battle.net\battle.net.8518\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5730CBE2-A7B8-449D-87B1-963E16BFDE74}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6B59D17C-3876-4A1E-9F4E-C032A77DE326}D:\heroes of the storm\versions\base51779\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EF89007E-C796-4870-92F5-A41E467FCCE1}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BE4BDEAC-E62C-446A-9F31-B764027FD59A}C:\program files (x86)\battle.net\battle.net.8554\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{436E8BDF-1738-4902-8FE8-85FECD57FF7C}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D9FFF4D8-8BB5-4DAD-A2A8-AF1B816C494F}D:\heroes of the storm\versions\base52008\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3DADB428-84BE-4FE6-B9A4-645EC55478AF}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0938E052-EA19-4052-9996-C9BD861BC8DC}D:\heroes of the storm\versions\base52124\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A7520F60-985A-4150-9ADE-93B7B2B4EBE7}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E215CBF5-B8DE-4A75-98BF-4683A6F35E29}C:\program files (x86)\blizzard app\battle.net.8600\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0BB6CEF6-DED5-4EA6-B0DE-D6CDAB74668A}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D33D64AC-9AE5-40E7-BFF7-5A5BCEB3876E}D:\heroes of the storm\versions\base52351\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{09052050-B321-4EF0-AB5C-F8BA7FC60A24}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9F17D201-9316-42C2-9509-C37F45106DAF}C:\program files (x86)\blizzard app\battle.net.8657\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{000DBB5D-8070-41C0-89D7-30615E91A41F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6C096652-8D16-4962-A88D-C129101F355F}D:\heroes of the storm\versions\base52647\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1B66AA5C-1BBF-4812-98D2-FFC842851002}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D28D171A-E4A8-4646-BDC4-AFC86E2213F9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{87BBD4DA-826A-46C7-A3EF-DF38B43CB2C3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A42D5BAD-CC3F-4E2D-B6E1-9D9E8C8BD44C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2D379503-968B-45D4-96FF-9B9A285B4BFD}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0E900554-D3B5-4DF6-876C-2B9EE3BF4A09}D:\heroes of the storm\versions\base58795\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EF670EA1-A8E4-4045-8739-1787BF1498A7}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{954C2865-C86B-4B76-AA25-593A5D3F3041}C:\program files (x86)\blizzard app\battle.net.9526\battle.net.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{778F3786-5082-4DB5-B08B-7FA507903C27}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FE42C476-A58F-4F63-B10A-DACBC49C43C8}D:\heroes of the storm\versions\base59239\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CA23D60B-429F-418D-807A-C6C240D2AE5F}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EA82EECD-1996-4DC8-9E3C-4E53A70FB489}D:\heroes of the storm\versions\base59657\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DB59CE41-0549-484B-952E-67F2FAFA8B5C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1804BD5D-6599-4016-AC53-CA006459B76C}D:\heroes of the storm\versions\base59799\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F0199650-8A67-4992-9FFB-7E71126F1C46}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C9A63013-76E3-41C9-BE92-C98D430A4BD8}D:\heroes of the storm\versions\base59988\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{01D0E02A-D1BD-4EDD-8697-A17D8B4760D8}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8DFB1123-D03C-4AB7-B415-2D742162F859}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0CBFB194-0511-4EE4-8B93-1AF87B2A10F9}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8FB46018-AC9A-4E5A-A43B-F50F3B0F55EF}D:\heroes of the storm\versions\base60399\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7F88D63F-44E5-4B4B-B761-88E2C0EEA4BB}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{38E57C98-61DD-4518-908A-67F8C137BDA8}D:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{096FC07F-382A-4B2B-A526-5940564A0F6C}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B8068610-4B45-4BE5-90C1-E4F1B2857D64}D:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7BD2F056-C181-43D7-BCDD-5E7F16C984F3}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4A5E5BF3-9A49-4319-9872-F4FF4B4B8AA1}D:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3B3A6183-5001-4AAC-8149-68F96BC892F2}D:\ubisoft games\assassin's creed iii\ac3sp.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AC205C09-435B-4E0F-B20B-6D15D31FEE97}D:\ubisoft games\assassin's creed iii\ac3sp.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FC352D25-0EB9-4817-BEDF-A67570155167}D:\ubisoft games\assassin's creed iii\ac3mp.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4A42F362-1F27-4D2F-AF75-1FDFE82E0747}D:\ubisoft games\assassin's creed iii\ac3mp.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5794629F-D912-48C6-BB91-C6FF5C32FFB6}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{80165ED4-16D2-4DD3-A3D4-B90EF6F3B77E}D:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3C58DF06-A789-4C53-8FE4-7F3FB81C260C}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AB3232DF-E603-4AC0-9810-01955DB34F57}D:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6D4CA6A6-A243-49DA-BF14-A1441DEAC124}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{09E2FBD6-110C-4970-B525-A6FD63EC2A1D}D:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{887E3DF6-C23A-4C4A-90A5-F1C625E1B786}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{00D74579-3FF5-4392-B5F5-268E2B4FBE27}D:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{117ED6AC-8448-493E-942B-585CA8DFB713}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3C6BDC0E-423C-475B-8D54-AFAB6D0DF8F1}D:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{28812A4C-4F61-4641-836C-90D3C212AADD}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{92659253-8BCC-4002-B76C-B8BE38BD2ACF}D:\heroes of the storm\versions\base62424\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7925E4FE-97A9-4D14-83AE-11DBA2509E44}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{69C3811E-CD8E-4A52-9010-EAC35BDADC38}D:\epic games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3FB1BF42-C3C2-41E6-9B97-4121FEB4E8BB}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A966F5A2-C8CF-46FA-BF39-77683F6E488D}D:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EF369FFE-33FB-4269-A000-B2ED712FB9FF}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6380C527-F893-4A3F-9A2D-57328977B85A}D:\epic games\fortnite\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{82727FCB-93AD-4750-AABA-394579BBE984}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D3867AE4-825F-498B-B0A5-0B90296702F6}D:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5793053F-BEB6-4345-BAD3-43B60352C0F6}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C4EE66A4-5BAE-45BF-9AF7-9AC1A387BDBA}D:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A7A22C1A-913B-441C-8805-1AF236316A95}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{197B4B93-CF68-417A-A093-A8D480192F96}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{904A717A-BA1D-4160-BAE2-FCFE30F3F8C3}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BE87592B-7DD8-4612-ADAD-4E6CC5306828}D:\heroes of the storm\versions\base63402\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{33F416F8-51E6-4EE3-BA82-66500D96A35B}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{654AEC83-F428-44D0-8C34-A6EAB5CA778A}D:\heroes of the storm\versions\base63635\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D988A3E-8CC1-4042-850A-92EF841A98F9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E0A29E4F-C57D-41E1-8000-4A9212B248DE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{20A70371-ADD8-4BCF-8919-636FF46E9581}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6D037C3F-2DE1-44B0-BC1E-33818C9F66A9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D982119E-74A1-4C0E-B136-3CDCA34F34EF}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A68C9FFD-AFB4-4EFE-A723-25DAD286AF1C}C:\program files (x86)\starcraft ii\versions\base63454\sc2_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{82795002-B420-4D0C-9FD3-4AB135C88C6C}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F4EA4DD0-E613-42F5-87F9-CD8C758E97F4}D:\heroes of the storm\versions\base64100\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8832C8AB-E56E-4D1E-BD17-7EBBF1036F2D}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AC9D4E61-168A-4C63-8C09-B464D1A677D4}D:\heroes of the storm\versions\base64129\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E8591DC7-CF87-4AA8-87B4-84B57C9C9989}C:\programdata\battle.net\agent\agent.6160\agent.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5297EB7B-3333-46A1-8B7B-C55D71ED8D3D}C:\programdata\battle.net\agent\agent.6160\agent.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{37E2876E-4516-4C5A-99DA-5C4B7A3A0280}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CF9DB37F-CD99-4649-B4AD-8DF10A2520AD}D:\heroes of the storm\versions\base64455\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{541271F8-CF37-44E5-A918-49F53F7BC016}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{38227AAB-9380-465A-B40E-3FFC95BC9C31}D:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B44D0F8C-FCAF-4928-BCA6-F765E65D9B65}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5193C11C-2D74-4F31-92C0-A91508B0A1F2}D:\heroes of the storm\versions\base69790\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4FDBED34-BDAA-4189-B786-6441CACDCB82}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B5AA01CB-69FF-4D1B-AD31-A93300A025F6}D:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{80FAB4A4-D965-4CD6-8154-2A6485469D15}D:\destiny 2\destiny2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4EA3460C-AB0E-4321-A690-A23DFF5CEB5D}D:\destiny 2\destiny2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{305EC580-7F8D-40B0-83C8-077E5EE35B06}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{552B3F79-9795-4C2D-B5F1-353492B7C190}D:\heroes of the storm\versions\base70200\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4E64D7B2-6782-4333-8C34-06A3029D1A45}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E2E2D14C-F867-4800-A899-208A26281BB1}D:\heroes of the storm\versions\base70616\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A5417B9E-2ABB-443C-8019-1946D0059A5C}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5A4DC5EA-9DED-47A1-BB2D-021444E80F4F}D:\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{942C6320-9743-4860-8276-60DE6BD8E236}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3C92D566-C440-46A7-A51C-693DBAA9CFC9}D:\lol\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A3987470-644D-4307-994C-53B64C6B3994}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A69FBD12-7755-47BD-84BA-58D9F1F9B5B5}D:\heroes of the storm\versions\base71449\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{578B9342-0367-472F-AB6B-3C27CB9B927E}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8EE75125-972C-41A8-B7FF-2CE05B2AB305}D:\heroes of the storm\versions\base71931\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DE8AC6ED-2CB4-48B2-B2B0-FBF94B358E69}D:\origin\apex\r5apex.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{87FC334D-1188-47B8-93B6-B5CBCFF1CBD4}D:\origin\apex\r5apex.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D197C664-B2DD-46F9-AAA9-AEC45F25A5D0}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BB11B7E5-F657-4A6C-9D25-795E0E2358DC}D:\heroes of the storm\versions\base72191\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{360C2738-392A-4003-AE66-0E635F01FBB5}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2D6ECB5B-BCAD-49A7-9918-6FAE2AE8A00D}D:\heroes of the storm\versions\base72307\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FE13EA00-D9F1-4F6E-9A21-BCA8354F0BE9}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DE3370F5-0BCB-408A-BA91-9335B98351AA}D:\heroes of the storm\versions\base72481\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D14AE3DA-042B-4D6E-8A92-5004ABCCCEBD}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EB55683F-605A-4785-A10E-BBAF170B9A25}D:\heroes of the storm\versions\base72649\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{35CBB580-0B89-42C0-8182-46CBE89D69E3}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3E831CCD-8C6F-4EFF-9148-8C0C765DCEE8}D:\heroes of the storm\versions\base73016\heroesofthestorm_x64.exe" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 295363172 B
Java, Flash, Steam htmlcache => 595277402 B
Windows/system/drivers => 4874697 B
Edge => 7652881 B
Chrome => 416882584 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 38788 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
User007 => 81572086 B

RecycleBin => 3467363 B
EmptyTemp: => 1.3 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:13:24 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Re: Velké využití RAM už po startu Windows 10

#9 Příspěvek od VelkejPitomec »

Ano, už při použití AdWCleaneru byla znatelná změna v úbytku zaplnění RAM. Nyní to ještě o trochu kleslo, paráda :happy:

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#10 Příspěvek od Rudy »

Tak to jsem rád. :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

VelkejPitomec
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 04 kvě 2019 08:48

Re: Velké využití RAM už po startu Windows 10

#11 Příspěvek od VelkejPitomec »

Moc děkuju za pomoc, už jsem začínal hledat nějakou funkční zálohu systému :)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Velké využití RAM už po startu Windows 10

#12 Příspěvek od Rudy »

OK a nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět